Edit tour

Windows Analysis Report
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8

Overview

General Information

Sample URL:	https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8
Analysis ID:	1562619
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6664 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveContent-Length: 1295Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://calepa.sharepoint.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_104.2.dr, chromecache_110.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_88.2.dr	String found in binary or memory: https://calepa.sharepoint.com/sites/UP/_layouts/15/images/folder.png
Source: chromecache_92.2.dr, chromecache_99.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-1-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net/bld/_layouts/15/16.0.25423.12016/require.js
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://res-2-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/
Source: chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.21.147.10:443 -> 192.168.2.8:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.8:49758 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@16/50@13/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://calepa.sharepoint.com/WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854	0%	Avira URL Cloud	safe
https://calepa.sharepoint.com/_layouts/15/images/microsoft-logo.png	0%	Avira URL Cloud	safe
https://calepa.sharepoint.com/ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f	0%	Avira URL Cloud	safe
https://calepa.sharepoint.com/ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b	0%	Avira URL Cloud	safe
https://calepa.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	0%	Avira URL Cloud	safe
https://calepa.sharepoint.com/ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f	0%	Avira URL Cloud	safe
https://calepa.sharepoint.com/sites/UP/_layouts/15/images/folder.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.138.10	true	false	high
www.google.com	142.250.181.68	true	false	high
calepa.sharepoint.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://calepa.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	false		unknown
https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	false		unknown
https://calepa.sharepoint.com/WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854	false	Avira URL Cloud: safe	unknown
https://calepa.sharepoint.com/_layouts/15/images/microsoft-logo.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://github.com/jrburke/requirejs	chromecache_104.2.dr, chromecache_110.2.dr	false		high
https://calepa.sharepoint.com/sites/UP/_layouts/15/images/folder.png	chromecache_88.2.dr	false	Avira URL Cloud: safe	unknown
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	chromecache_108.2.dr, chromecache_93.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_100.2.dr, chromecache_87.2.dr, chromecache_107.2.dr, chromecache_88.2.dr	false		high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_92.2.dr, chromecache_99.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.138.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562619
Start date and time:	2024-11-25 19:28:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@16/50@13/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.208.227, 172.217.19.238, 74.125.205.84, 34.104.35.123, 23.212.252.104, 23.212.252.97, 93.184.221.240, 199.232.210.172, 172.217.21.42, 172.217.19.10, 172.217.19.234, 142.250.181.10, 142.250.181.42, 142.250.181.74, 142.250.181.106, 142.250.181.138, 172.217.19.202, 172.217.17.74, 216.58.208.234, 172.217.17.42, 2.19.198.80, 23.32.238.8, 192.229.221.95, 172.217.17.35, 95.101.143.169, 95.101.143.97, 95.101.143.235, 2.20.68.201, 23.32.238.168, 23.32.238.209
Excluded domains from analysis (whitelisted): res-2-gcc.cdn.office.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, res-2-gcc.cdn.office.net.edgekey.net, e40491.dscd.akamaiedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, 192331-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net, a1894.dscb.akamai.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8

Input	Output
URL: https://calepa.sharepoint.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://calepa.sharepoint.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984517355816157
Encrypted:	false
SSDEEP:	48:8e+0dq9TKFwzHRidAKZdA1oehwiZUklqehekJy+3:8Hfnu/Yy
MD5:	A6663527A3791FA749F784A4B7405D4B
SHA1:	664582ADAFC1833F589E1651591B4299CA4DCC7A
SHA-256:	E368FC3260D7A83F3C2D1AF9C266B4A7D12070392DA38FB57CF3ED18A81D299C
SHA-512:	989DBF3E6F8FA495F09197A4F6AF028D84A5E175F831D2256F678607C5C3E750D007527F98B40CEC3B9C60EDC89F357B55B9E9B20E3C8FAF3D69B86A511065ED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........g?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IyY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9984148796177275
Encrypted:	false
SSDEEP:	48:8z+0dq9TKFwzHRidAKZdA1leh/iZUkAQkqehvkJy+2:8CfnM9Q0Yy
MD5:	9C7A5D4F570F1BC4DAC60D5264CC6D04
SHA1:	B4BB541E1C02012424113F2233937921AD7F7E06
SHA-256:	47A9F7663A013B1A3E35A8AB2D646E1CFC934BCBD7BC507FC647ED08B85B1DBE
SHA-512:	6CD59594C18D2FCC3CD0BF5DA9DC9331CA27C0DCCBAA0AEADECCC3E077229086467DE3AE99410BE14204C58084D5F1A398858D1E4F8702B9D842F89BC2AB3D48
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....%%..g?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IyY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.009420142238211
Encrypted:	false
SSDEEP:	48:8s+0dq9TKFwbHRidAKZdA14t5eh7sFiZUkmgqeh7s9kJy+BX:8VfnMnjYy
MD5:	CA12DB3C29903C4455F31C5467EC5B36
SHA1:	28DFFDB753E420A60C7DC413A5E3FA63837BAF73
SHA-256:	A4B1BCDCD54475DDED2F98DE6D3B6C2EA4F20A73C665103F7C24021A19244922
SHA-512:	BADD2A85E841DF9A506E6155445AD4688B1B10C35656D487B6B7F03448232B40CB4E0B572D24BED7E1758D1BA227302CA39E5810123C0E5FEF15A596C0C316F3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IyY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.996696660861398
Encrypted:	false
SSDEEP:	48:8x+0dq9TKFwzHRidAKZdA16ehDiZUkwqehLkJy+R:8ofnHlYy
MD5:	CE86D1BB41DF5D87A927AEA9E6C2725A
SHA1:	5CBFBD54A579056485A1E5FA1F59EA4CF7BD991B
SHA-256:	223247ED0FD79AC910E11FA41878A316E5A882B1D7CDD865569C7A5077310C05
SHA-512:	F05EB91FF77C5493337CC6C4E710F917AD405716A64D288AF433CA305A2E7A64ED8179844C969384AC61238CA7D2E8AC59FF75BF86B3BF60ECF90A84B19A7197
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....y=..g?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IyY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.988321247504401
Encrypted:	false
SSDEEP:	48:8E+0dq9TKFwzHRidAKZdA1UehBiZUk1W1qehRkJy+C:8tfnX9xYy
MD5:	045F692094523E91F4BE1BDC44859F5E
SHA1:	C54DDB939236E3388D57972220B34B7A438023EA
SHA-256:	5F0858A8F27A7CF919263E8A447A767A96794DFA4286512C0C97F08A43895B2A
SHA-512:	679F05BB3897B326D587A2395772BA5C4EA09122471E4ABFAD184BFF7792556F7F623D33507508DFD3CA4114A6A3C8F14F31A5AB85DDBC1912FE9E4F3D7028FE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........g?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IyY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 25 17:29:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9958745174375525
Encrypted:	false
SSDEEP:	48:8E+0dq9TKFwzHRidAKZdA1duTrehOuTbbiZUk5OjqehOuTbjkJy+yT+:8tfngTYTbxWOvTbjYy7T
MD5:	0967BCD5F8AF4061E5CCFE8F09FF8B64
SHA1:	A3DCA4D84DA55911952E2EEAF9AA6AB1F4AB7BD9
SHA-256:	82B39A78A3D88A5B00AE68D3F7003818FAB8C917125AA709A0F4F69CD56663F2
SHA-512:	21D8A70C7C18B10AD84932E56DEB97A36E47A76DB77541444ED90422DFECDBF8570A34416BE7AF7A60690E440323749EBE809523F6EE1C5465E5CEA35B8D7EB7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3...g?..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IyY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VyY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VyY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VyY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VyY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67331
Entropy (8bit):	5.654275578209268
Encrypted:	false
SSDEEP:	1536:Plggu8+ahvhWXBOxSPSW8N6fGNNK0T7Js2ZWxo3:PLuTCGeTK0TNWxA
MD5:	FC44E5615A10C55689EAF5438A45EA6D
SHA1:	1F02CC2C5619371A195C814DCE2AB7365F615C3E
SHA-256:	3F7BFE4364510D810F7CF792A87D0BBAA4FE988D077DEC8A04174E8180CD91EA
SHA-512:	F46CCAC885DB061DC5F8E4CB3BA49D312C212241F9939972BE1A4A77906D9B2485911103247AB85FC9E6C34A5B77741F3BDCAA0B26F719BCB0E466AF6ED816F7
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3331
Entropy (8bit):	7.927896166439245
Encrypted:	false
SSDEEP:	96:zHjOKn3csE3x5liVsCo4GcPIZpV6x5cge8oo9:zDOK3zE3x5TCwcP4LQNeq
MD5:	EF884BDEDEF280DF97A4C5604058D8DB
SHA1:	6F04244B51AD2409659E267D308B97E09CE9062B
SHA-256:	825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB
SHA-512:	A083381C53070B65B3B8A7A7293D5D2674D2F6EC69C0E19748823D3FDD6F527E8D3D31D311CCEF8E26FC531770F101CDAF95F23ECC990DB405B5EF48B0C91BA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......0............sRGB.........IDATx..=w....G.z..L.4fN.k\dS..._`..........r...~.F..e._.RZ.0.K.\..CB...1.{qq/..^\|.G..o.......?....Or.......y~....]..V.a.mM...M.\kH..@B`s.$"n...)!.@"b#4. !.9...7.u...hD ....T.........:EJ.4"..X........<\|.pgkk+....>~.....pju1i"b.J.&!.!...=T....k..D7.....O.<.?}......./..(.`0..!.C..'.?..e..~.....l6...._.x1rmR...$\|E...l.WKDH...f..... ...Y.0R....>...{...-..o........,...E../......_....eM.Q....@Q...w sp5.9..l.W)...Pq... .]..B..).../M.G.g....].V...5$<......Eb.9.....>LYAk.Z.k..b..]N%>}4a....4!S...t..d..<.8AH+.../r...._...!qt.:q..fR.:..KW.._...T...5..>.0!.hq.rbND\...XR.,2.uX..Q.b...wQ......g..X...F...~.....ikZE...UA....V.I!..]..Mm..R.....~k.VC.n..V.B#W...\..yI.3.....2........6c....2J....,g..5O1.s.4V2.....f..K..Obf\....;.w...\|.F>F>6_z..P.dU<.wVV......?.q.?&........O.>....l.S.upp....59.C_.......fJ.M.={v,......]Y_....n.?UF....v<.$..AD...p.....:$r =p...C.k.3....n.v..~.TGd!...l.W...s..

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67126
Entropy (8bit):	5.655927787092241
Encrypted:	false
SSDEEP:	1536:Plggu8dVhsoWXBOxSPSW8N6fGNNKDo+iJs2ZWUm:PLuPCGeTKDj6WUm
MD5:	FDF23BF5F5ED73922290BF3D87E22196
SHA1:	AC97EE3DDAB63D9A2A9539873DE86181075B88C3
SHA-256:	49978BB3F7CE6D411B15C96E4E3E3DBB34AEDA2D6EAD7D034C40C9A0097D2C75
SHA-512:	0A993E21038750B7409A0763F97B049B0E3EC79C8464F0BFC0B2406CF49D956DBB5234D9DEBC40100C707D279FD95F4E2E2E251E3E764A014F8F07EB807570FD
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HmL:GL
MD5:	FAE6EAA6F130A3B0665C92D5D06F2F1A
SHA1:	108CEEC1D2BC00DA89256F9CAB4203EE8C8E4E77
SHA-256:	0576C2A34B1AD9552F87B4E72FEE6A8EDCDA6CC0A99156112D5658B16152ACFB
SHA-512:	8B480E338CB8AA82E3AFB0CBB5FEF0F899EB90E5956CBEA90C9F2B7DD32C6CBEBE2679E4B688A9D2FCE9A195AB31BE141B3236441516E9EBF118E2A2AEF2D693
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8IPl1jOJQyRIFDYl4IcM=?alt=proto
Preview:	CgkKBw2JeCHDGgA=

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17444)
Category:	dropped
Size (bytes):	17672
Entropy (8bit):	5.233316811547578
Encrypted:	false
SSDEEP:	384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM
MD5:	6EFDDF589864D2E146A55C01C6764A35
SHA1:	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F
SHA-256:	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
SHA-512:	1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A
Malicious:	false
Reputation:	low
Preview:	/** vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.22 Copyright (c) 2010-2015, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */.var requirejs,require,define;!function(global){function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){if(e){var r;for(r=0;r<e.length&&(!e[r]\|\|!t(e[r],r,e));r+=1);}}function eachReverse(e,t){if(e){var r;for(r=e.length-1;r>-1&&(!e[r]\|\|!t(e[r],r,e));r-=1);}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var r;for(r in e)if(hasProp(e,r)&&t(e[r],r))break}function mixin(e,t,r,i){return t&&eachProp(t,function(t,n){(r\|\|!hasProp(e,n))&&(!i\|\|"object"!=typeof t\|\|!t\|\|isArray(t)\|\|isFunction(t)\|\|t instanceof RegExp?e[n]=t:(e[n]\|\|(e[n]={}),mixin(e[n],t,r,i)))}),e}function bind(e,t){return function(){return t.apply(e,ar

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3331
Entropy (8bit):	7.927896166439245
Encrypted:	false
SSDEEP:	96:zHjOKn3csE3x5liVsCo4GcPIZpV6x5cge8oo9:zDOK3zE3x5TCwcP4LQNeq
MD5:	EF884BDEDEF280DF97A4C5604058D8DB
SHA1:	6F04244B51AD2409659E267D308B97E09CE9062B
SHA-256:	825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB
SHA-512:	A083381C53070B65B3B8A7A7293D5D2674D2F6EC69C0E19748823D3FDD6F527E8D3D31D311CCEF8E26FC531770F101CDAF95F23ECC990DB405B5EF48B0C91BA2
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/_layouts/15/images/microsoft-logo.png
Preview:	.PNG........IHDR.......0............sRGB.........IDATx..=w....G.z..L.4fN.k\dS..._`..........r...~.F..e._.RZ.0.K.\..CB...1.{qq/..^\|.G..o.......?....Or.......y~....]..V.a.mM...M.\kH..@B`s.$"n...)!.@"b#4. !.9...7.u...hD ....T.........:EJ.4"..X........<\|.pgkk+....>~.....pju1i"b.J.&!.!...=T....k..D7.....O.<.?}......./..(.`0..!.C..'.?..e..~.....l6...._.x1rmR...$\|E...l.WKDH...f..... ...Y.0R....>...{...-..o........,...E../......_....eM.Q....@Q...w sp5.9..l.W)...Pq... .]..B..).../M.G.g....].V...5$<......Eb.9.....>LYAk.Z.k..b..]N%>}4a....4!S...t..d..<.8AH+.../r...._...!qt.:q..fR.:..KW.._...T...5..>.0!.hq.rbND\...XR.,2.uX..Q.b...wQ......g..X...F...~.....ikZE...UA....V.I!..]..Mm..R.....~k.VC.n..V.B#W...\..yI.3.....2........6c....2J....,g..5O1.s.4V2.....f..K..Obf\....;.w...\|.F>F>6_z..P.dU<.wVV......?.q.?&........O.>....l.S.upp....59.C_.......fJ.M.={v,......]Y_....n.?UF....v<.$..AD...p.....:$r =p...C.k.3....n.v..~.TGd!...l.W...s..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67126
Entropy (8bit):	5.654149388970393
Encrypted:	false
SSDEEP:	1536:Plggu8znhymWXBOxSPSW8N6fGNNKJdsJs2ZWUm:PLuzCGeTKJdcWUm
MD5:	48373BAF09D03CA8A99F17A592C24A09
SHA1:	23B2E5D757B0CBF79E456721D38D4D72C56A98BB
SHA-256:	8A950A62AE881F558D1513E92C4FC4AF913C4EA10B947606798A6AE1A093EC2D
SHA-512:	47B55844AA40DCC89F72396D36F13459B13A887CD3CE86D95B8A4BC17310614E19A9551F3B1071E12C9CE719CF2FBFDAFA1F0FE9B09E7E353B0C7B77E0155D85
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67126
Entropy (8bit):	5.653487313013558
Encrypted:	false
SSDEEP:	1536:Plggu8aGhb1WXBOxSPSW8N6fGNNKUc9yJs2ZWUm:PLuHCGeTKUc9qWUm
MD5:	FE7AFD74E361218FB03A4EEF0B7EBC52
SHA1:	3CFB3403075AA1CD7616B3C6B0991971FFA28CA4
SHA-256:	859734864DDEF8C328ADA8E1FE0D36299D9A574BB8D52885269A7922BC8874CE
SHA-512:	DA1B39DF4208557DF50DB156597E038456B57DB8633FB5DC3C10EBB31F5D19423068C9043B65BCCDE16017E98888E0608A5814D2FB49464F9192EBB137EF0489
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17444)
Category:	downloaded
Size (bytes):	17672
Entropy (8bit):	5.233316811547578
Encrypted:	false
SSDEEP:	384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM
MD5:	6EFDDF589864D2E146A55C01C6764A35
SHA1:	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F
SHA-256:	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
SHA-512:	1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A
Malicious:	false
Reputation:	low
URL:	https://res-2-gcc.cdn.office.net/bld/_layouts/15/16.0.25423.12016/require.js
Preview:	/** vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.22 Copyright (c) 2010-2015, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */.var requirejs,require,define;!function(global){function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){if(e){var r;for(r=0;r<e.length&&(!e[r]\|\|!t(e[r],r,e));r+=1);}}function eachReverse(e,t){if(e){var r;for(r=e.length-1;r>-1&&(!e[r]\|\|!t(e[r],r,e));r-=1);}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var r;for(r in e)if(hasProp(e,r)&&t(e[r],r))break}function mixin(e,t,r,i){return t&&eachProp(t,function(t,n){(r\|\|!hasProp(e,n))&&(!i\|\|"object"!=typeof t\|\|!t\|\|isArray(t)\|\|isFunction(t)\|\|t instanceof RegExp?e[n]=t:(e[n]\|\|(e[n]={}),mixin(e[n],t,r,i)))}),e}function bind(e,t){return function(){return t.apply(e,ar

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/_layouts/15/images/favicon.ico?rev=47
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67126
Entropy (8bit):	5.654659147863042
Encrypted:	false
SSDEEP:	1536:Plggu8e6hPBWXBOxSPSW8N6fGNNKs5iUJs2ZWUm:PLuLCGeTKs5i0WUm
MD5:	45429258D424AA4A591EA8118583FE8E
SHA1:	A0E078544F8391FEAB5CD39DBC1BF1F34141FB9B
SHA-256:	6CE36FFD1FA01E9043D0EE999292821A793DE22421C7E04BA936CBF367E136F9
SHA-512:	8C698AB6ACD5ED2E2009E2C9113E4A5380771EF228607C91B82404F9DE3279E6A8D4F98B8269D1E08296687E73A551FD53FC13EEAF7C5C03F050CF3775924CCB
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67126
Entropy (8bit):	5.655952386755972
Encrypted:	false
SSDEEP:	1536:Plggu8DXhi2WXBOxSPSW8N6fGNNKlV7Js2ZWUm:PLu3CGeTKlVNWUm
MD5:	B3E12D46A166D4D7A399B026C36B0B12
SHA1:	DD2BC12AC819E869E213B3A3C10FD5F552E2E2B0
SHA-256:	47FEAE71426FA21B7450598D3F74ED71B618B59AB9DAAA037564DFB7A3C987CE
SHA-512:	1F3E99E3B9541B7F62B231D7D4C7E329932DBFDA428C73AAFB9922AF84687D0FDDDEFC6D42092CBD52200EE62F031871BCE210FC3F5804E1599C73949043BEFD
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	5.321963563063112
Encrypted:	false
SSDEEP:	6:JiMVBdgqZjZWtMfgRTH1cUR/Fs46RIhuS9Tug6n:MMHdVBZWyUT7R/FP1V6
MD5:	3EABED4CCF9ACBBDC9C4BEA4054A8E74
SHA1:	0EE4D1B610D1790D13CCDEED2BD9E2D3047BB68F
SHA-256:	F80C50F8490BCB363BA73FC5F7AF59E37368E52AAB75EFAD1798A2DCEFF6D183
SHA-512:	706623C3E2D000C9117918FACE5F8E58630228367BD6EDFC16FA456DD03A738F1FAC605D5508E207697B022809A4FD844187142691A6C15098876895E431E5CF
Malicious:	false
Reputation:	low
URL:	https://res-2-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist..RequestId:99ff5a11-b01e-008b-4168-3f1de4000000.Time:2024-11-25T18:30:53.0067126Z</Message></Error>

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37337)
Category:	dropped
Size (bytes):	40328
Entropy (8bit):	5.385482969292045
Encrypted:	false
SSDEEP:	768:Tkv8WTY/BbI5VVQYxHtGEWGjaKEKlvgVv9yc1F:TW05bs1tGe4dZ
MD5:	B4E27A4D39B598172647E0C174AAF21D
SHA1:	9B63229B34814F26075818D55061867B6C794CE9
SHA-256:	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E
SHA-512:	DEB28E8505E4D1A7E6C6659DF09C83D142A94CA0DA1CEBA0A06843E8E933AA625D4CD6413FF4F5A521AC5C005D7A9AF2191AD8A40D71448318CAC20A4ABBB79E
Malicious:	false
Reputation:	low
Preview:	/! For license information please see spoguestaccess.js.LICENSE.txt /.document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.call(o,l)&&(c[l]

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67126
Entropy (8bit):	5.656655469143346
Encrypted:	false
SSDEEP:	1536:Plggu8fThe6WXBOxSPSW8N6fGNNKZ6MJs2ZWUm:PLufCGeTKZ68WUm
MD5:	1A36D7606C1F2272CC2AC440B56B2856
SHA1:	D695CA529651C324B8C9233A4762B3EF9AB79EAA
SHA-256:	FCE15B405D736CE95B497847C808459B23332B11B36ED74D1D95F9CAC4A4AE03
SHA-512:	781A33A8CE1B42E6602BE490445DD09CA72C1EBFDAB2A21502E06AE19C99382891B58ECCD4731B3913E954A2A8E790319501105A5C1185FAE4B8653CC56715D9
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	dropped
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	67126
Entropy (8bit):	5.654003141908942
Encrypted:	false
SSDEEP:	1536:Plggu8e6hPBWXBOxSPSW8N6fGNNKwG3WJs2ZWUm:PLu/CGeTKwG3+WUm
MD5:	E59078310F120F72CDB3D892789FC28E
SHA1:	7371FDBB8685251721E75DC07B50F6C069B39C2A
SHA-256:	9E8887FA0DE9A7740428633AF18228BB8ACD5DF5F05D9EA10E891EC7F61134CA
SHA-512:	33DAFB0DDBFF156D5CDDF1AA19C54135A5BE34AB4D11C55B5E296239DE67B7AA60C416478F2C414552C2D697DE5AA1D97E346C79423BB983308A56D80E441FA6
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://calepa.sharepoint.com/WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	dropped
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37337)
Category:	downloaded
Size (bytes):	40328
Entropy (8bit):	5.385482969292045
Encrypted:	false
SSDEEP:	768:Tkv8WTY/BbI5VVQYxHtGEWGjaKEKlvgVv9yc1F:TW05bs1tGe4dZ
MD5:	B4E27A4D39B598172647E0C174AAF21D
SHA1:	9B63229B34814F26075818D55061867B6C794CE9
SHA-256:	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E
SHA-512:	DEB28E8505E4D1A7E6C6659DF09C83D142A94CA0DA1CEBA0A06843E8E933AA625D4CD6413FF4F5A521AC5C005D7A9AF2191AD8A40D71448318CAC20A4ABBB79E
Malicious:	false
Reputation:	low
URL:	https://res-2-gcc.cdn.office.net/files/odsp-web-prod_2024-11-08.003/spoguestaccesswebpack/spoguestaccess.js
Preview:	/! For license information please see spoguestaccess.js.LICENSE.txt /.document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.call(o,l)&&(c[l]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 19:29:31.357686996 CET	49676	443	192.168.2.8	52.182.143.211
Nov 25, 2024 19:29:33.998351097 CET	49677	80	192.168.2.8	192.229.211.108
Nov 25, 2024 19:29:34.685816050 CET	49673	443	192.168.2.8	23.206.229.226
Nov 25, 2024 19:29:34.967066050 CET	49672	443	192.168.2.8	23.206.229.226
Nov 25, 2024 19:29:37.474689007 CET	443	49703	23.206.229.226	192.168.2.8
Nov 25, 2024 19:29:37.474831104 CET	49703	443	192.168.2.8	23.206.229.226
Nov 25, 2024 19:29:42.649828911 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:42.649861097 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:42.649921894 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:42.650259972 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:42.650326014 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:42.650407076 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:42.650477886 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:42.650492907 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:42.650831938 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:42.650861979 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.186681986 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:44.186738968 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:44.186827898 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:44.187124014 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:44.187139988 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:44.347997904 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.349128008 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.349150896 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.350194931 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.350275993 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.355287075 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.355365038 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.355482101 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.355490923 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.393131018 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:44.393168926 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:44.393249989 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:44.394917965 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:44.394942999 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:44.397922039 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.463234901 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.464900017 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.464930058 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.465998888 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.466074944 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.466454029 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.466521025 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.507522106 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.507548094 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.554332018 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.969400883 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.969428062 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.969494104 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.969517946 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.997550011 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.997589111 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.997613907 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:44.997627020 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:44.997661114 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.005996943 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.006048918 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.006057024 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.046680927 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.165549994 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.165560007 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.165585995 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.165626049 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.165674925 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.190879107 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.190891981 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.190944910 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.190962076 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.216248989 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.216258049 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.216321945 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.216337919 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.240860939 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.240869045 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.240937948 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.240953922 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.290280104 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.344793081 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.344805956 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.344834089 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.344871998 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.344907999 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.355135918 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.355750084 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.355799913 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.356168985 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.356190920 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.356200933 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.356249094 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.356477976 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.356493950 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.356614113 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.356627941 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.357043982 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.357089043 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.357213020 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.357366085 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.357378960 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.358454943 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.358463049 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.358490944 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.358520031 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.358557940 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.363785028 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.363830090 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.363843918 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.363866091 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.363900900 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.385654926 CET	49711	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.385699034 CET	443	49711	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.399337053 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.674928904 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:45.674976110 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:45.675097942 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:45.676239967 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:45.676256895 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:45.768748999 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.768770933 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.768867970 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.768925905 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.769021034 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.800045013 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.800072908 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.800105095 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.800154924 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.800201893 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.800214052 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.816951036 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.817019939 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.817034960 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.817198038 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:45.878230095 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:45.878314018 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:45.887836933 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:45.887855053 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:45.888174057 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:45.903676033 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:45.905998945 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:45.906022072 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:45.907032013 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:45.907107115 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:45.922096968 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:45.922254086 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:45.932631016 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:45.969777107 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:45.969804049 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:45.984942913 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.984965086 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:45.985085964 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:46.002957106 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:46.003087997 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:46.003194094 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:46.023457050 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:46.067127943 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:46.080884933 CET	49712	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:46.080957890 CET	443	49712	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:46.111329079 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:46.254261017 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:46.254292011 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:46.254462957 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:46.254659891 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:46.254678011 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:46.485330105 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:46.485491037 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:46.485557079 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:46.485615969 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:46.485635042 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:46.485646009 CET	49714	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:46.485651970 CET	443	49714	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:46.529974937 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:46.530025959 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:46.530169964 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:46.530396938 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:46.530414104 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:46.942594051 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:46.942884922 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:46.942903996 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:46.943280935 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:46.944263935 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:46.944341898 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:46.944715023 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:46.991332054 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.025424957 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.026211977 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.026235104 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.027215958 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.027275085 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.027574062 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.027630091 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.027719975 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.027730942 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.070889950 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.086184978 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.086374044 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.086394072 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.086755037 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.087270975 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.087353945 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.087373972 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.087403059 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.131334066 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.457032919 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:47.457107067 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:47.460383892 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:47.460391045 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:47.460681915 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:47.505470037 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:47.527970076 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.527997017 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.528044939 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.528064013 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.528105974 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.534277916 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.550721884 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.550738096 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.550776005 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.550786018 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.560137033 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.560147047 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.560204983 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.560229063 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.560273886 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.567439079 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.567490101 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.567511082 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.567554951 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.589979887 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.589989901 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.590053082 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.597315073 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.597348928 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.597398043 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.597414970 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.597460985 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.634171963 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.634181976 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.634241104 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.634259939 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.654115915 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.654181957 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.654191971 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.654234886 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.724275112 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.724337101 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.724355936 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.732578039 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.732641935 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.732657909 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.732669115 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.732695103 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.732718945 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.732939959 CET	49716	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.732953072 CET	443	49716	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.736912966 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.736934900 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.736994982 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.737204075 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.737215996 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.781888962 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.781899929 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.781959057 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.781980038 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.831800938 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.881051064 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.881063938 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.881164074 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.881181002 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.884673119 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.884711981 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.884857893 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.884874105 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.890855074 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.891124964 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.891146898 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.892213106 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.892349005 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.892724037 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.892724037 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.892793894 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.913614988 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.913624048 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.913770914 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.913789988 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.924307108 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.924468040 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.924479961 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.936515093 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.936523914 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.936553001 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.936634064 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.936634064 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.936654091 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.942857981 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.942882061 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.954210997 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.954257965 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.954348087 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.954348087 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.954368114 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.954574108 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.954715014 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.955013990 CET	49715	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.955029964 CET	443	49715	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.958847046 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:47.958959103 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:47.959466934 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.959476948 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.959553003 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.959553957 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.959577084 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.959587097 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.959588051 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.959630966 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.959702015 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.960189104 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.960201025 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.960880995 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.960915089 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.961345911 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.961345911 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.961375952 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:47.962619066 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:47.962640047 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:47.963145018 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:47.965106010 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:47.991352081 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:47.993314981 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.993325949 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.993349075 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.993395090 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:47.993431091 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:47.993453979 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.007345915 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:48.037175894 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.048285961 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.048297882 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.048326015 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.048365116 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.048408031 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.067162991 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.067173004 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.067193985 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.067235947 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.067429066 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.094800949 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.094809055 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.094985008 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.095016003 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.109214067 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.109221935 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.109313011 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.109313011 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.109329939 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.118849039 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.119028091 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.120114088 CET	49717	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:48.120130062 CET	443	49717	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:48.426372051 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.445314884 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.445329905 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.445374966 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.445416927 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:48.445436001 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.445468903 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:48.470598936 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.470614910 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.470803976 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:48.470829010 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.471131086 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:48.502135992 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:48.502289057 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:48.502772093 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:48.503031969 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:48.503031969 CET	49724	443	192.168.2.8	2.21.147.10
Nov 25, 2024 19:29:48.503055096 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:48.503074884 CET	443	49724	2.21.147.10	192.168.2.8
Nov 25, 2024 19:29:48.631834030 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.631850958 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.631885052 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.631923914 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:48.631964922 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:48.632606030 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:48.632651091 CET	443	49723	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:48.632745981 CET	49723	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.025193930 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:49.071331978 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.423985958 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.424241066 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.424254894 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.425271988 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.425334930 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.425678015 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.425744057 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.425801992 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.471334934 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.475609064 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.475615978 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.521155119 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.633572102 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:49.634026051 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:49.634038925 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:49.635550022 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:49.636452913 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:49.636605024 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:49.636621952 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:49.636667013 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:49.661333084 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.661587000 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.661597013 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.662627935 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.662684917 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.663013935 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.663074970 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.663141966 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.676748037 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.676764011 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.676774025 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.676796913 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.676816940 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.676836967 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:49.676860094 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.676887035 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:49.676903963 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:49.684164047 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:49.696511030 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.696589947 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:49.696590900 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:49.696645021 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:49.703334093 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.706110001 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.706120014 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.757426023 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.918215036 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.918247938 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.918307066 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.918327093 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.918471098 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.957592010 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.957603931 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.957640886 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.957726002 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.957726002 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:49.978929043 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:49.979005098 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.105257034 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:50.105317116 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:50.105405092 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:50.105434895 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:50.105444908 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:50.105484009 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:50.106168985 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:50.106251001 CET	443	49727	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:50.106317043 CET	49727	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:50.113554955 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:50.113595009 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:50.113670111 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:50.113933086 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:50.113950014 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:50.115123987 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.115134001 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.115385056 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.116559029 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.116570950 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.138113976 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.138128042 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.138200045 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.138215065 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.146188021 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.146215916 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.146265984 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.146284103 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.146388054 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.146940947 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.147005081 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.147017002 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.147027969 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.147068024 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.147916079 CET	49726	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.147933960 CET	443	49726	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.176925898 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.176935911 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.176975012 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.176999092 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.177151918 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.206427097 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.206540108 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.368457079 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.368479013 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.368635893 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.368657112 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.394532919 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.394609928 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.394632101 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.394655943 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.420651913 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.420665026 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.420813084 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.420836926 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.420856953 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:50.420909882 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.507033110 CET	49728	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:50.507071972 CET	443	49728	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:51.017020941 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:51.017055035 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:51.017071009 CET	49721	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:29:51.017077923 CET	443	49721	172.202.163.200	192.168.2.8
Nov 25, 2024 19:29:51.716173887 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:51.716393948 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:51.716419935 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:51.716767073 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:51.717128992 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:51.717189074 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:51.717303038 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:51.735430002 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:51.735621929 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:51.735632896 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:51.736690998 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:51.736751080 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:51.737081051 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:51.737140894 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:51.737245083 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:51.737252951 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:51.759371996 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:51.786957026 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:52.188393116 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:52.188417912 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:52.188627958 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:52.188651085 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:52.188764095 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:52.189227104 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:52.189259052 CET	443	49734	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:52.189341068 CET	49734	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:52.229830980 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:52.229892969 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:52.230022907 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:52.230037928 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:52.230230093 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:52.244159937 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:52.244232893 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:52.247368097 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:52.247457981 CET	443	49733	13.107.138.10	192.168.2.8
Nov 25, 2024 19:29:52.247709990 CET	49733	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:29:52.248095036 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:52.248186111 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:52.248578072 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:52.248578072 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:52.248620987 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:53.870388985 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:53.870722055 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:53.870753050 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:53.872152090 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:53.872212887 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:53.872514963 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:53.872582912 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:53.872690916 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:53.872699022 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:53.926997900 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:54.376205921 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:54.376229048 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:54.376338005 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:54.376358986 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:54.394273996 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:54.394345999 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:54.394356012 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:54.394378901 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:54.394427061 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:54.394582987 CET	49736	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:29:54.394597054 CET	443	49736	13.107.136.10	192.168.2.8
Nov 25, 2024 19:29:55.613832951 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:55.613892078 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:29:55.614114046 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:55.616961956 CET	49713	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:29:55.616992950 CET	443	49713	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:03.458183050 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:03.458235025 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:03.458333015 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:03.458472967 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:03.458508968 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:03.458559036 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:03.459451914 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:03.459467888 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:03.459678888 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:03.459697008 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:04.997159958 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:04.998176098 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:04.998219013 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:04.998589993 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:04.999660015 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:04.999742031 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:04.999826908 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:04.999842882 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:04.999859095 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.095776081 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.096080065 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.096111059 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.097161055 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.097222090 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.097624063 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.097690105 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.137999058 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.138025045 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.183604956 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.601135969 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.601227045 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.601239920 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.625685930 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.625813961 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.625825882 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.643297911 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.643424034 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.643433094 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.643485069 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.803816080 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.803956985 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.803977966 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.828567982 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.828649998 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.828660965 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.860552073 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.860579967 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.860697985 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.860707998 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.860733986 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.884762049 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.884769917 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.884844065 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.884855032 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.939918041 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.989351988 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.989361048 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.989387989 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:05.989419937 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:05.989437103 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.009665012 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.009674072 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.009699106 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.009736061 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.009759903 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.011015892 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.017621040 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.017688036 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.017702103 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.017714977 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.017750025 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.017774105 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.018470049 CET	49740	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.018487930 CET	443	49740	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.055341959 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.369257927 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.369281054 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.369333029 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.369359016 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.369412899 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.408220053 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.408235073 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.408257961 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.408282995 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.408333063 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.418493986 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.418555021 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.596163034 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.596178055 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.596246004 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.596263885 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.626379013 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.626451969 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.626471996 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.667856932 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.685556889 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.685570955 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.685602903 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.685636044 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.685693026 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.715657949 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.715667009 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.715701103 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.715745926 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.715784073 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.783996105 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.784006119 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.784104109 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.784123898 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.808866024 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.808922052 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.808960915 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.808975935 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.809000015 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.833420038 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.833431959 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.833523035 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.833539963 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.856777906 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.856786966 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.856812954 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.856865883 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.856878996 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.856961966 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.883910894 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.883923054 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.883950949 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.884052038 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.896512032 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.896519899 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.896589994 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.896605015 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.920650005 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.920727968 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.920742989 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.920759916 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.920818090 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.920964956 CET	49739	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:06.920979977 CET	443	49739	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:06.925235987 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:06.925282955 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:06.925357103 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:06.925535917 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:06.925554037 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:08.583703995 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:08.584889889 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:08.584916115 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:08.585278034 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:08.585743904 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:08.585813046 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:08.586014986 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:08.627340078 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.060277939 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.060300112 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.060394049 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.060427904 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.060487032 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.093143940 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.093153000 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.093242884 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.093256950 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.101598024 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.101664066 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.101675034 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.101722002 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.282846928 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.282943964 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.282962084 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.308587074 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.308677912 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.308692932 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.349307060 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.391153097 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.391166925 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.391242027 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.391268015 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.433300972 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.433336020 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.433371067 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.433394909 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.433428049 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.474283934 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.480952024 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.480966091 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.480990887 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.481040001 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.481091022 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.500700951 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.500711918 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.500727892 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.500788927 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.500842094 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.523359060 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.523367882 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.523432970 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.523456097 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.554157972 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.554193020 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.554224014 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.554243088 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.554272890 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.577327967 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.577339888 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.577408075 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.577428102 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.598916054 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.598925114 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.598963022 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.598990917 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.599016905 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.599042892 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.607199907 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.607209921 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.607263088 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.607280970 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.607323885 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:09.607376099 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.607527018 CET	49742	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:09.607558012 CET	443	49742	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:14.503990889 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:14.504061937 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:14.504149914 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:14.504260063 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:14.504312038 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:14.504374027 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:14.504970074 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:14.504987001 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:14.505114079 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:14.505141020 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.163916111 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.164942026 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.165024996 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.165093899 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.165211916 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.165229082 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.165488005 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.165580988 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.165843964 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.165925980 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.166110039 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.166178942 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.166287899 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.166327000 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.166341066 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.211550951 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.795500994 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.795531034 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.795612097 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.795680046 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.795757055 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.823621988 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.823636055 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.823712111 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.823759079 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.840699911 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.840768099 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:16.840797901 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:16.840853930 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.018662930 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.018862009 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.018910885 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.052932978 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.052994967 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.053011894 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.071670055 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.071731091 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.071742058 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.088190079 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.088231087 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.088249922 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.088263988 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.088290930 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.132261038 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.219901085 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.219926119 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.219942093 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.219979048 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.220035076 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.235333920 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.235342979 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.235388041 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.235433102 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.235440969 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.246686935 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.246738911 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.246748924 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.246784925 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:17.246794939 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.246826887 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.281068087 CET	49743	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:17.281083107 CET	443	49743	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.300662994 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.300723076 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.300820112 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.301165104 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.301184893 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.303814888 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.303836107 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.303884029 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.926367044 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.926451921 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.926479101 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.948227882 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.948245049 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.948333979 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.948343992 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.973539114 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.973622084 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:23.973648071 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:23.973702908 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.142426014 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.142441034 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.142543077 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.142576933 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.174731970 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.174763918 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.174824953 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.174854040 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.174868107 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.196386099 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.196396112 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.196469069 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.196494102 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.216706991 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.216717005 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.216748953 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.216798067 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.216825008 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.216836929 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.259478092 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.347305059 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.347326040 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.347363949 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.347392082 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.347434044 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.360655069 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.360661983 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.360682964 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.360711098 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.360744953 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.365025043 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.365088940 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.365103006 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.365118027 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.365149975 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.365480900 CET	49744	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.365494967 CET	443	49744	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.889075994 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.889502048 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.889569998 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.889949083 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.890366077 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:24.890449047 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:24.937844992 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:27.388572931 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:27.388637066 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:27.388715982 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:27.389064074 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:27.389094114 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.068393946 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.068530083 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.071535110 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.071551085 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.071815968 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.075637102 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.123334885 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.594153881 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.594180107 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.594196081 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.594355106 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.594398975 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.594451904 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.777960062 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.778038025 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.778058052 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.778079033 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.778125048 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.778285980 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.778306007 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:29.778316021 CET	49750	443	192.168.2.8	172.202.163.200
Nov 25, 2024 19:30:29.778322935 CET	443	49750	172.202.163.200	192.168.2.8
Nov 25, 2024 19:30:32.066251040 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.066310883 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.066384077 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.066693068 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.066709042 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.069799900 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.069842100 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.069871902 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.712258101 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.712280035 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.712434053 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.712493896 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.745760918 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.745770931 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.745874882 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.745904922 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.754232883 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.754318953 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.754331112 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.754374027 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.924506903 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.924520016 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.924663067 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.924704075 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.947081089 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.947117090 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.947184086 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.947207928 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.947225094 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.969464064 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.969501972 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.969629049 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.969669104 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.999217987 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.999228001 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:32.999284029 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:32.999300957 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.040208101 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.116189003 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.116199017 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.116225004 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.116324902 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.135643005 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.135652065 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.135685921 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.135735989 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.135780096 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.141752005 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.141760111 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.141813040 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.141829014 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.141846895 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.141880035 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.141906023 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.142532110 CET	49748	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.142551899 CET	443	49748	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.620852947 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.621222019 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.621244907 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.621606112 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.621893883 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:33.621967077 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:33.661906004 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:40.864839077 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:40.864881039 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:40.864983082 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:40.865040064 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:40.865046978 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:40.865052938 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:40.867553949 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:40.867571115 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.458645105 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.458669901 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.458739042 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.458766937 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.458813906 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.489392042 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.489404917 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.489520073 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.489535093 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.505743027 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.505822897 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.505831003 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.505889893 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.662657976 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.662794113 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.662808895 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.683365107 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.683434010 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.683444023 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.705199957 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.705292940 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.705302954 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.730503082 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.730516911 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.730586052 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.730596066 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.772234917 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.842163086 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.842176914 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.842209101 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.842256069 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.842303038 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.853591919 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.853601933 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.853626966 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.853686094 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.853715897 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.858198881 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.858277082 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.858283043 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.858293056 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:41.858320951 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.858362913 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.859098911 CET	49751	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:41.859107018 CET	443	49751	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:42.399374008 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:42.399776936 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:42.399792910 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:42.400295019 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:42.400691986 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:42.400758028 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:42.459290028 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:44.085269928 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:44.085299969 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:44.085401058 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:44.085701942 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:44.085710049 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:45.793447971 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:45.793494940 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:45.793587923 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:45.793916941 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:45.793932915 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:45.872461081 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:45.872736931 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:45.872756004 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:45.873087883 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:45.873563051 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:45.873625994 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:45.927680969 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:47.592818022 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:47.592936993 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:47.594558001 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:47.594574928 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:47.594830036 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:47.602380991 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:47.647351027 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.082195997 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.082221031 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.082238913 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.082346916 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.082379103 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.082443953 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.269283056 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.269309998 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.269406080 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.269438982 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.269485950 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.313332081 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.313349962 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.313519955 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.313555002 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.313600063 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.447551012 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.447580099 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.447678089 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.447710991 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.447757959 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.486831903 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.486880064 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.486959934 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.486990929 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.487032890 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.511195898 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.511214972 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.511327982 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.511362076 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.511406898 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.533852100 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.533868074 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.533957958 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.533971071 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.534012079 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.646795988 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.646817923 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.646948099 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.646972895 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.647012949 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.665155888 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.665173054 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.665260077 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.665273905 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.665309906 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.681752920 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.681771040 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.681870937 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.681885958 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.681935072 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.698286057 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.698302031 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.698400021 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.698431969 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.698482037 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.712693930 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.712709904 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.712768078 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.712795973 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.712837934 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.834033012 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.834050894 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.834141016 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.834170103 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.834209919 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.836863995 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.836929083 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.836937904 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.837021112 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.837110043 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.837141037 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.837152004 CET	49758	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.837158918 CET	443	49758	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.878134012 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.878145933 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.878165007 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.878190994 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.878237009 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.878264904 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.878550053 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.878565073 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.878659964 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.878675938 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.879883051 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.879923105 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.880032063 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.880137920 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.880153894 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.882394075 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.882405043 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.882474899 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.883039951 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.883049011 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.883105040 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.883239985 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.883249998 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:48.883296013 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:48.883305073 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:49.660465002 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:49.660465002 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:49.660546064 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.219866037 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:50.219918966 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:50.219994068 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:50.220235109 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:50.220256090 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:50.256659985 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.256690025 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.256732941 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.256747961 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.256788969 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.284323931 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.284336090 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.284427881 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.284441948 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.301182985 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.301270008 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.301284075 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.301331043 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.457926035 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.457940102 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.458014965 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.458028078 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.480009079 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.480093956 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.480104923 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.508696079 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.508739948 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.508810997 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.508831978 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.508845091 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.525690079 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.525716066 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.525804043 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.525830030 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.572195053 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.603538990 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.604098082 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.604111910 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.604582071 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.604587078 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.643397093 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.643407106 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.643434048 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.643486023 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.643547058 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.653161049 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.653168917 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.653192043 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.653263092 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.653276920 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.657646894 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.657730103 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.657740116 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.657757998 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.657793045 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.658091068 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.658106089 CET	443	49754	13.107.138.10	192.168.2.8
Nov 25, 2024 19:30:50.658118010 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.658148050 CET	49754	443	192.168.2.8	13.107.138.10
Nov 25, 2024 19:30:50.669775009 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.669852018 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.679234028 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.703485012 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.703499079 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.703982115 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.703990936 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.704236984 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.704277992 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.704695940 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.704701900 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.704744101 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.704761028 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.705432892 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.705437899 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.738766909 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.739346027 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.739368916 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:50.739826918 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:50.739835978 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.062323093 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.062387943 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.062458038 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.062683105 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.062700987 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.062711000 CET	49760	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.062717915 CET	443	49760	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.065422058 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.065488100 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.065560102 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.065706015 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.065721035 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124188900 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124209881 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124263048 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124283075 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124319077 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.124334097 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124373913 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.124402046 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.124408007 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124465942 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.124805927 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.124805927 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.124814987 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124964952 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.124991894 CET	443	49761	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.125041008 CET	49761	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.126041889 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.126049042 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.126065969 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.126208067 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.126235008 CET	443	49759	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.126277924 CET	49759	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.126930952 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.127015114 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.127062082 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.127676964 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.127691984 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.127701998 CET	49762	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.127707005 CET	443	49762	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.130541086 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.130568027 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.130647898 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.134012938 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.134052038 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.134138107 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.134180069 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.134192944 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.134681940 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.134697914 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.135263920 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.135274887 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.135332108 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.135576963 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.135586977 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.202045918 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.202055931 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.202193022 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.202213049 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.202424049 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.202440977 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.202512026 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.202563047 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.202593088 CET	443	49763	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.202723026 CET	49763	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.205018044 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.205054045 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.205111980 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.205248117 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:51.205260038 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:51.808389902 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:51.808717966 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:51.808748960 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:51.809082985 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:51.809417963 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:51.809482098 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:51.849242926 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:52.850855112 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.851434946 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.851466894 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.851902962 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.851910114 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.922507048 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.923113108 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.923134089 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.923571110 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.923576117 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.924371958 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.924617052 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.924663067 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.924946070 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.924952030 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.933691025 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.933947086 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.933963060 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.934283018 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:52.934288025 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:52.999708891 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.000264883 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.000284910 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.000682116 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.000686884 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.313255072 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.313303947 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.313365936 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.313716888 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.313740969 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.313751936 CET	49767	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.313757896 CET	443	49767	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.317034960 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.317075968 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.317188025 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.317466021 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.317482948 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.369601965 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.369653940 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.369712114 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.369929075 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.369939089 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.369951963 CET	49770	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.369956970 CET	443	49770	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.373193979 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.373220921 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.373322010 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.373529911 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.373543978 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.374478102 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.374531031 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.374588013 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.374691010 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.374706984 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.374736071 CET	49769	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.374742031 CET	443	49769	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.376920938 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.376940966 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.377023935 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.377202034 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.377214909 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.379786968 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.379856110 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.379966021 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.380099058 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.380105019 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.380115032 CET	49768	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.380120039 CET	443	49768	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.383032084 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.383054018 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.383127928 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.383373976 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.383387089 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.451133966 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.451220036 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.451287031 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.451544046 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.451558113 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.451570034 CET	49771	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.451575041 CET	443	49771	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.454744101 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.454767942 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:53.454862118 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.455070019 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:53.455082893 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.110116959 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.110701084 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.110733986 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.112287045 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.112293959 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.115653038 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.115959883 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.115983963 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.116276979 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.116282940 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.165441036 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.165999889 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.166050911 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.166435003 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.166444063 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.166991949 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.167260885 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.167293072 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.167589903 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.167597055 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.244643927 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.245390892 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.245418072 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.245842934 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.245848894 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.552062988 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:55.552123070 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:55.552187920 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:55.553848982 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.554004908 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.554066896 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.554212093 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.554230928 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.554244041 CET	49776	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.554250002 CET	443	49776	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.557523966 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.557547092 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.557624102 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.557775021 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.557789087 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.559389114 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.559444904 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.559492111 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.559675932 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.559696913 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.559720039 CET	49773	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.559727907 CET	443	49773	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.562376976 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.562408924 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.562469959 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.562679052 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.562691927 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.620584965 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.620651007 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.620706081 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.620945930 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.620945930 CET	49774	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.620968103 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.620980024 CET	443	49774	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.623581886 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.623646021 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.623743057 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.623826981 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.623850107 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.623862982 CET	49775	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.623871088 CET	443	49775	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.624017000 CET	49780	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.624047995 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.624119997 CET	49780	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.624289036 CET	49780	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.624306917 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.626461029 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.626483917 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.626547098 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.626672029 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.626694918 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.631860971 CET	49757	443	192.168.2.8	142.250.181.68
Nov 25, 2024 19:30:55.631879091 CET	443	49757	142.250.181.68	192.168.2.8
Nov 25, 2024 19:30:55.699357986 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.699431896 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.699506998 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.700457096 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.700469017 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.700474977 CET	49777	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.700479984 CET	443	49777	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.703299999 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.703332901 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:55.703402042 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.703526020 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:55.703540087 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.369765043 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.369992971 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.370537043 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.370537996 CET	49780	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.370568991 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.370572090 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.371057987 CET	49780	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.371067047 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.371325016 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.371334076 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.395719051 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.396518946 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.396541119 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.397145033 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.397150040 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.417319059 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.417867899 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.417903900 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.418281078 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.418287039 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.487134933 CET	49784	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:57.487186909 CET	443	49784	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:57.487277031 CET	49784	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:57.488080025 CET	49784	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:57.488099098 CET	443	49784	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:57.488440037 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:57.488475084 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:57.488496065 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:57.551367044 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.551887035 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.551918983 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.552896023 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.552907944 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.806369066 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.806432009 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.806566954 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.806829929 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.806855917 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.806873083 CET	49781	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.806880951 CET	443	49781	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.807595968 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.807666063 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.807723999 CET	49780	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.808084011 CET	49780	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.808104038 CET	443	49780	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.811158895 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.811188936 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.811284065 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.811460018 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.811472893 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.812510967 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.812541962 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.812633991 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.812771082 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.812783957 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.847565889 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.847641945 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.847716093 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.847908020 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.847920895 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.847968102 CET	49779	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.847973108 CET	443	49779	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.851357937 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.851399899 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.851524115 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.851716995 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.851737976 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.872358084 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.872416973 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.872483015 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.872626066 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.872646093 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.872704983 CET	49778	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.872713089 CET	443	49778	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.874921083 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.874957085 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.875076056 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.875277996 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.875288963 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.999435902 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.999522924 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.999660015 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.999855042 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.999897957 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:57.999959946 CET	49783	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:57.999977112 CET	443	49783	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:58.002897024 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:58.002943993 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:58.003045082 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:58.003226042 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:58.003237963 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:58.109216928 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.109375954 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.109421968 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.135895014 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.135932922 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.136034966 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.136070967 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.136097908 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.152618885 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.152714968 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.152734041 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.198697090 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.319674015 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.319688082 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.319735050 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.319818020 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.319853067 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.341871977 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.341882944 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.341969967 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.342008114 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.371238947 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.371248007 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.371330976 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.371349096 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.386821985 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.386830091 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.386866093 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.386929989 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.386943102 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.386955023 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.427438974 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.511236906 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.511270046 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.511332035 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.511390924 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.511444092 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.521296978 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.521306038 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.521367073 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.521444082 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.521487951 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.529838085 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.529922009 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:58.529936075 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.529966116 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.531713009 CET	49765	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:58.531740904 CET	443	49765	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:59.069976091 CET	443	49784	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:59.070405006 CET	49784	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:59.070450068 CET	443	49784	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:59.070796967 CET	443	49784	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:59.071091890 CET	49784	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:59.071162939 CET	443	49784	13.107.136.10	192.168.2.8
Nov 25, 2024 19:30:59.131048918 CET	49784	443	192.168.2.8	13.107.136.10
Nov 25, 2024 19:30:59.534089088 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.534898996 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.534928083 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.535301924 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.535320997 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.538011074 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.538366079 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.538382053 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.538783073 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.538786888 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.569216967 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.569730997 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.569756031 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.570314884 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.570321083 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.591443062 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.592103958 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.592129946 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.592397928 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.592403889 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.798428059 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.799124956 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.799144030 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.799566031 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.799571037 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.982273102 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.982369900 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.982434988 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.982692957 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.982714891 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.982728004 CET	49786	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.982734919 CET	443	49786	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.986037016 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.986072063 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.986167908 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.986368895 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.986382008 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.990108013 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.990159035 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.990282059 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.990386009 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.990386009 CET	49787	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.990403891 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.990413904 CET	443	49787	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.992938042 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.992958069 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:30:59.993117094 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.993225098 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:30:59.993236065 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.014777899 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.014836073 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.014911890 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.015126944 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.015151978 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.015162945 CET	49788	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.015168905 CET	443	49788	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.018199921 CET	49794	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.018235922 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.018326044 CET	49794	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.018553972 CET	49794	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.018579006 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.031327009 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.031382084 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.031464100 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.031689882 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.031699896 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.031729937 CET	49789	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.031733990 CET	443	49789	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.034373999 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.034394026 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.034508944 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.034718990 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.034732103 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.384690046 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.384769917 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.384840012 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.385097027 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.385117054 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.385128975 CET	49790	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.385134935 CET	443	49790	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.388629913 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.388658047 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:00.388775110 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.389003992 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:00.389024973 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.753210068 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.753787041 CET	49794	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.753798962 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.754405975 CET	49794	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.754410982 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.929704905 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.930290937 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.930303097 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.930932999 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.930938005 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.970253944 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.970662117 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.970684052 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.971117020 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.971121073 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.986079931 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.986618996 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.986630917 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:01.987189054 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:01.987193108 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.202545881 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.202613115 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.202660084 CET	49794	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.205316067 CET	49794	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.205333948 CET	443	49794	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.221035957 CET	49797	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.221070051 CET	443	49797	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.221128941 CET	49797	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.227179050 CET	49797	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.227189064 CET	443	49797	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.248608112 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.257097960 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.257136106 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.257687092 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.257693052 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.435014963 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.435066938 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.435137033 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.435334921 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.435353994 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.435369015 CET	49795	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.435374975 CET	443	49795	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.443548918 CET	49798	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.443595886 CET	443	49798	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.443660975 CET	49798	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.443885088 CET	49798	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.443898916 CET	443	49798	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.452547073 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.452634096 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.452696085 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.452850103 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.452862978 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.452900887 CET	49792	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.452910900 CET	443	49792	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.454430103 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.454473972 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.454545021 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.455044031 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.455044031 CET	49793	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.455056906 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.455065966 CET	443	49793	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.456811905 CET	49799	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.456835032 CET	443	49799	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.456917048 CET	49799	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.457057953 CET	49799	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.457068920 CET	443	49799	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.458420992 CET	49800	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.458452940 CET	443	49800	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.458532095 CET	49800	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.458653927 CET	49800	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.458667040 CET	443	49800	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.707511902 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.707568884 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.707710028 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.707977057 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.708002090 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.708014011 CET	49796	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.708019972 CET	443	49796	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.711515903 CET	49801	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.711551905 CET	443	49801	13.107.246.63	192.168.2.8
Nov 25, 2024 19:31:02.711657047 CET	49801	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.711869955 CET	49801	443	192.168.2.8	13.107.246.63
Nov 25, 2024 19:31:02.711884975 CET	443	49801	13.107.246.63	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 25, 2024 19:29:39.705068111 CET	53	58770	1.1.1.1	192.168.2.8
Nov 25, 2024 19:29:39.825367928 CET	53	53006	1.1.1.1	192.168.2.8
Nov 25, 2024 19:29:41.491063118 CET	64336	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:41.491224051 CET	57840	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:42.510272980 CET	59413	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:42.580369949 CET	53	57016	1.1.1.1	192.168.2.8
Nov 25, 2024 19:29:44.023230076 CET	57820	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:44.023488045 CET	63847	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:44.185543060 CET	53	57820	1.1.1.1	192.168.2.8
Nov 25, 2024 19:29:44.185909986 CET	53	63847	1.1.1.1	192.168.2.8
Nov 25, 2024 19:29:46.106365919 CET	64117	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:46.106549978 CET	53863	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:49.043682098 CET	53	54480	1.1.1.1	192.168.2.8
Nov 25, 2024 19:29:55.617371082 CET	57362	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:55.617592096 CET	62302	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:29:59.630094051 CET	53	62601	1.1.1.1	192.168.2.8
Nov 25, 2024 19:30:12.169049025 CET	138	138	192.168.2.8	192.168.2.255
Nov 25, 2024 19:30:18.348767042 CET	53	59494	1.1.1.1	192.168.2.8
Nov 25, 2024 19:30:39.436413050 CET	53	51477	1.1.1.1	192.168.2.8
Nov 25, 2024 19:30:40.801831961 CET	53	55470	1.1.1.1	192.168.2.8
Nov 25, 2024 19:30:49.656025887 CET	60514	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:30:49.656168938 CET	61415	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:30:57.550400972 CET	60038	53	192.168.2.8	1.1.1.1
Nov 25, 2024 19:30:57.550559044 CET	56921	53	192.168.2.8	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 25, 2024 19:29:41.491063118 CET	192.168.2.8	1.1.1.1	0x509c	Standard query (0)	calepa.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:41.491224051 CET	192.168.2.8	1.1.1.1	0x435b	Standard query (0)	calepa.sharepoint.com	65	IN (0x0001)	false
Nov 25, 2024 19:29:42.510272980 CET	192.168.2.8	1.1.1.1	0x78fe	Standard query (0)	calepa.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:44.023230076 CET	192.168.2.8	1.1.1.1	0x8e7a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:44.023488045 CET	192.168.2.8	1.1.1.1	0xc399	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 25, 2024 19:29:46.106365919 CET	192.168.2.8	1.1.1.1	0x359	Standard query (0)	calepa.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:46.106549978 CET	192.168.2.8	1.1.1.1	0x19b3	Standard query (0)	calepa.sharepoint.com	65	IN (0x0001)	false
Nov 25, 2024 19:29:55.617371082 CET	192.168.2.8	1.1.1.1	0xda12	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:55.617592096 CET	192.168.2.8	1.1.1.1	0x20b2	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Nov 25, 2024 19:30:49.656025887 CET	192.168.2.8	1.1.1.1	0xa75f	Standard query (0)	calepa.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:30:49.656168938 CET	192.168.2.8	1.1.1.1	0x8cf8	Standard query (0)	calepa.sharepoint.com	65	IN (0x0001)	false
Nov 25, 2024 19:30:57.550400972 CET	192.168.2.8	1.1.1.1	0xdce8	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:30:57.550559044 CET	192.168.2.8	1.1.1.1	0xc49e	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 25, 2024 19:29:42.066339970 CET	1.1.1.1	192.168.2.8	0x435b	No error (0)	calepa.sharepoint.com	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:42.066339970 CET	1.1.1.1	192.168.2.8	0x435b	No error (0)	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:42.066339970 CET	1.1.1.1	192.168.2.8	0x435b	No error (0)	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:42.649085999 CET	1.1.1.1	192.168.2.8	0x78fe	No error (0)	calepa.sharepoint.com	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:42.649085999 CET	1.1.1.1	192.168.2.8	0x78fe	No error (0)	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:42.649085999 CET	1.1.1.1	192.168.2.8	0x78fe	No error (0)	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:42.649085999 CET	1.1.1.1	192.168.2.8	0x78fe	No error (0)	192331-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:42.649085999 CET	1.1.1.1	192.168.2.8	0x78fe	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:42.649085999 CET	1.1.1.1	192.168.2.8	0x78fe	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:44.185543060 CET	1.1.1.1	192.168.2.8	0x8e7a	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:44.185909986 CET	1.1.1.1	192.168.2.8	0xc399	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 25, 2024 19:29:46.253557920 CET	1.1.1.1	192.168.2.8	0x19b3	No error (0)	calepa.sharepoint.com	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253557920 CET	1.1.1.1	192.168.2.8	0x19b3	No error (0)	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253557920 CET	1.1.1.1	192.168.2.8	0x19b3	No error (0)	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253608942 CET	1.1.1.1	192.168.2.8	0x359	No error (0)	calepa.sharepoint.com	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253608942 CET	1.1.1.1	192.168.2.8	0x359	No error (0)	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253608942 CET	1.1.1.1	192.168.2.8	0x359	No error (0)	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253608942 CET	1.1.1.1	192.168.2.8	0x359	No error (0)	192331-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253608942 CET	1.1.1.1	192.168.2.8	0x359	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:46.253608942 CET	1.1.1.1	192.168.2.8	0x359	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:29:55.754542112 CET	1.1.1.1	192.168.2.8	0xda12	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:29:55.755948067 CET	1.1.1.1	192.168.2.8	0x20b2	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.151604891 CET	1.1.1.1	192.168.2.8	0x8cf8	No error (0)	calepa.sharepoint.com	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.151604891 CET	1.1.1.1	192.168.2.8	0x8cf8	No error (0)	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.151604891 CET	1.1.1.1	192.168.2.8	0x8cf8	No error (0)	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.218900919 CET	1.1.1.1	192.168.2.8	0xa75f	No error (0)	calepa.sharepoint.com	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.218900919 CET	1.1.1.1	192.168.2.8	0xa75f	No error (0)	5109-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.218900919 CET	1.1.1.1	192.168.2.8	0xa75f	No error (0)	192331-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192331-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.218900919 CET	1.1.1.1	192.168.2.8	0xa75f	No error (0)	192331-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:50.218900919 CET	1.1.1.1	192.168.2.8	0xa75f	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:30:50.218900919 CET	1.1.1.1	192.168.2.8	0xa75f	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 25, 2024 19:30:57.695703983 CET	1.1.1.1	192.168.2.8	0xdce8	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 25, 2024 19:30:57.696371078 CET	1.1.1.1	192.168.2.8	0xc49e	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

calepa.sharepoint.com

https:

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49711	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:44 UTC	728	OUT	GET /:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:44 UTC	1669	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67331 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,5,1447058,0,525568,11 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 306c67a1-8084-7000-2524-f0b28ebdb66a request-id: 306c67a1-8084-7000-2524-f0b28ebdb66a MS-CV: oWdsMISAAHAlJPCyjr22ag.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 131 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EB220E3A330D4CDFB22FCEE525FCBD6A Ref B: EWR311000101023 Ref C: 2024-11-25T18:29:44Z Date: Mon, 25 Nov 2024 18:29:44 GMT Connection: close
2024-11-25 18:29:44 UTC	3775	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-25 18:29:44 UTC	8192	IN	Data Raw: 32 34 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 33 36 35 70 78 29 7b 2e 6d 73 2d 68 69 64 64 65 6e 4c 67 55 70 2c 2e 6d 73 2d 68 69 64 64 65 6e 4d 64 55 70 2c 2e 6d 73 2d 68 69 64 64 65 6e 58 6c 2c 2e 6d 73 2d 68 69 64 64 65 6e 58 6c 44 6f 77 6e 2c 2e 6d 73 2d 68 69 64 64 65 6e 58 6c 55 70 2c 2e 6d 73 2d 68 69 64 64 65 6e 58 78 6c 44 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 33 36 36 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 39 31 39 70 78 29 7b 2e 6d 73 2d 68 69 64 64 65 6e 4c 67 55 70 2c 2e 6d 73 2d 68 69 64 64 65 6e 4d 64 55 70 2c 2e 6d 73 2d 68 69 64 64 65 6e 58 6c 55 70 2c 2e 6d 73 2d 68 69 64 64 65 6e 58 78 6c 2c 2e Data Ascii: 24px) and (max-width:1365px){.ms-hiddenLgUp,.ms-hiddenMdUp,.ms-hiddenXl,.ms-hiddenXlDown,.ms-hiddenXlUp,.ms-hiddenXxlDown{display:none!important}}@media (min-width:1366px) and (max-width:1919px){.ms-hiddenLgUp,.ms-hiddenMdUp,.ms-hiddenXlUp,.ms-hiddenXxl,.
2024-11-25 18:29:45 UTC	2870	IN	Data Raw: 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 66 69 6c 65 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 2e 66 69 6c 65 2d 69 6e 66 6f 20 69 6d 67 7b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 66 69 6c 65 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 2e 66 69 6c 65 2d 69 6e 66 6f 20 2e 66 69 6c 65 2d 6e 61 6d 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 66 6f 72 6d 2d 6d 65 73 73 61 67 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 3b 6d 61 72 67 69 6e 3a 32 32 70 78 20 30 20 32 34 70 78 Data Ascii: flex;align-items:center}.file-description .file-info img{height:32px;width:32px;margin-right:15px}.file-description .file-info .file-name{font-size:17px;color:#333}.form-message{font-size:14px;font-weight:400;color:#666;line-height:17px;margin:22px 0 24px
2024-11-25 18:29:45 UTC	8192	IN	Data Raw: 36 32 35 64 63 35 64 39 66 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 35 36 2d 50 Data Ascii: 625dc5d9f">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha256-P
2024-11-25 18:29:45 UTC	8192	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: onstructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}function
2024-11-25 18:29:45 UTC	8192	IN	Data Raw: 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 65 63 69 Data Ascii: eof setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","speci
2024-11-25 18:29:45 UTC	8192	IN	Data Raw: 6e 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 65 29 3b 4f Data Ascii: ng=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(e);O
2024-11-25 18:29:45 UTC	8192	IN	Data Raw: 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 Data Ascii: shift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlFaile
2024-11-25 18:29:45 UTC	8192	IN	Data Raw: 58 44 73 5a 31 41 4c 4f 52 74 41 51 41 6f 63 6e 71 6f 4b 37 76 36 45 4d 5a 53 6f 73 65 47 50 2b 75 76 71 36 44 35 6e 69 67 70 5a 56 41 45 75 4c 65 72 64 63 63 68 55 6b 6c 6f 30 4c 77 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: XDsZ1ALORtAQAocnqoK7v6EMZSoseGP+uvq6D5nigpZVAEuLerdcchUklo0Lw=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</script><div class=
2024-11-25 18:29:45 UTC	3342	IN	Data Raw: 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 7d 29 3b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 63 65 73 73 43 6f 6e 66 69 67 54 6f 53 75 70 70 6f 72 74 46 61 69 6c 4f 76 65 72 28 63 6f 6e 66 69 67 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 70 61 74 68 73 20 3d 20 63 6f 6e 66 69 67 2e 70 61 74 68 73 2c 0d 0a 20 20 20 20 20 20 62 75 6e 64 6c 65 73 20 3d 20 63 6f 6e 66 69 67 2e 62 75 6e 64 6c 65 73 3b 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 28 6f 72 69 67 69 6e 2c 20 69 6e 64 65 78 29 20 7b 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 72 69 67 69 6e 0d 0a 20 20 20 20 20 20 20 Data Ascii: failOverState.baseUrlFailedOver = true; } }, }); function processConfigToSupportFailOver(config) { var paths = config.paths, bundles = config.bundles; function getUrl(origin, index) { return origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49712	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:45 UTC	738	OUT	GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:45 UTC	812	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Tue, 25 Nov 2025 16:34:51 GMT Last-Modified: Sun, 06 Oct 2024 03:25:39 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 4294967295,4294967295,4294967295,4294967295,4294967295,4294967295,4294967295,4294967295 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 79658470794F41D18D1F312C20A1BEDE Ref B: EWR311000106025 Ref C: 2024-11-25T18:29:45Z Date: Mon, 25 Nov 2024 18:29:45 GMT Connection: close
2024-11-25 18:29:45 UTC	3358	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-11-25 18:29:45 UTC	8192	IN	Data Raw: 74 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 78 6d 6c 52 65 71 75 65 73 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 57 65 62 46 6f 72 6d 5f 43 61 6c 6c 62 61 63 6b 43 6f 6d 70 6c 65 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 2e 78 6d 6c 52 65 71 75 65 73 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 2e 67 2e 20 68 74 74 70 3a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 63 74 69 6f 6e 20 3d 20 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 Data Ascii: ts) { xmlRequest.onreadystatechange = WebForm_CallbackComplete; callback.xmlRequest = xmlRequest; // e.g. http: var action = theForm.action \|\| document.location.pathname, fragmentIndex = action.indexOf('#'); if
2024-11-25 18:29:45 UTC	4144	IN	Data Raw: 0a 20 20 20 20 7d 0d 0a 20 20 20 20 61 72 72 61 79 5b 69 5d 20 3d 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 69 3b 0d 0a 7d 0d 0a 76 61 72 20 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 20 3d 20 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 78 70 6c 6f 72 65 72 27 29 20 3d 3d 20 2d 31 29 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 44 61 74 61 20 3d 20 22 22 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 5f 5f 63 61 6c 6c 62 61 63 6b 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 Data Ascii: } array[i] = element; return i;}var __nonMSDOMBrowser = (window.navigator.appName.toLowerCase().indexOf('explorer') == -1);var __theFormPostData = "";var __theFormPostCollection = new Array();var __callbackTextTypes = /^(text\|pass
2024-11-25 18:29:45 UTC	7369	IN	Data Raw: 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 61 72 67 65 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e Data Ascii: nt.getElementById(target); } else { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49714	2.21.147.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 18:29:46 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=54259 Date: Mon, 25 Nov 2024 18:29:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49716	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:46 UTC	795	OUT	GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:47 UTC	773	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 25 Nov 2025 18:29:47 GMT Last-Modified: Mon, 25 Nov 2024 18:29:47 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,12,1449743,0,370551,11 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B46FF4B8D1A5447389090F659886F63A Ref B: EWR311000101023 Ref C: 2024-11-25T18:29:47Z Date: Mon, 25 Nov 2024 18:29:47 GMT Connection: close
2024-11-25 18:29:47 UTC	3397	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 64 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 29 0d 0a 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 20 26 26 20 28 Data Ascii: nt.getElementById(id); if (typeof(control.value) == "string") { return control.value; } return ValidatorGetValueRecursive(control);}function ValidatorGetValueRecursive(control){ if (typeof(control.value) == "string" && (
2024-11-25 18:29:47 UTC	4144	IN	Data Raw: 20 20 20 20 69 66 20 28 6f 70 2e 6d 61 74 63 68 28 65 78 70 29 20 3d 3d 20 6e 75 6c 6c 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 6e 75 6d 20 3d 20 70 61 72 73 65 49 6e 74 28 6f 70 2c 20 31 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 69 73 4e 61 4e 28 6e 75 6d 29 20 3f 20 6e 75 6c 6c 20 3a 20 6e 75 6d 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 28 64 61 74 61 54 79 70 65 20 3d 3d 20 22 44 6f 75 62 6c 65 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 65 78 70 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 28 5b 2d 5c 5c 2b 5d 29 3f 28 5c 5c 64 2a 29 5c 5c 22 20 2b 20 76 61 6c 2e 64 65 63 69 6d 61 6c 63 68 61 72 20 2b 20 22 3f 28 5c 5c 64 2a Data Ascii: if (op.match(exp) == null) return null; num = parseInt(op, 10); return (isNaN(num) ? null : num); } else if(dataType == "Double") { exp = new RegExp("^\\s([-\\+])?(\\d)\\" + val.decimalchar + "?(\\d*
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d Data Ascii: ue(val.controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\|
2024-11-25 18:29:47 UTC	3026	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return length;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49717	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:47 UTC	824	OUT	GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:47 UTC	772	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 25 Nov 2025 18:29:47 GMT Last-Modified: Mon, 25 Nov 2024 18:29:47 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,23,67045,0,457425,11 X-AspNet-Version: 4.0.30319 SPRequestDuration: 6 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0ABAF6BE5F414D2FA537D66A86F38E9D Ref B: EWR311000102023 Ref C: 2024-11-25T18:29:47Z Date: Mon, 25 Nov 2024 18:29:47 GMT Connection: close
2024-11-25 18:29:47 UTC	1385	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 2e 5f 76 61 6c 69 64 61 74 65 50 61 72 61 6d 65 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 68 29 7b 76 61 72 20 62 2c 67 3d 61 2e 74 79 70 65 2c 6c 3d 21 21 61 2e 69 6e 74 65 67 65 72 2c 6b 3d 21 21 61 2e 64 6f 6d 45 6c 65 6d 65 6e 74 2c 6d 3d 21 21 61 2e 6d 61 79 42 65 4e 75 6c 6c 3b 62 3d 46 75 6e 63 74 69 6f 6e 2e 5f 76 61 6c 69 64 61 74 65 50 61 72 61 6d 65 74 65 72 54 79 70 65 28 63 2c 67 2c 6c 2c 6b 2c 6d 2c 68 29 3b 69 66 28 62 29 7b 62 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 65 3d 61 2e 65 6c 65 6d 65 6e 74 54 79 70 65 2c 66 3d 21 21 61 2e 65 6c 65 6d 65 6e 74 4d 61 79 42 65 4e 75 6c 6c 3b 69 66 28 67 3d 3d 3d 41 72 72 61 79 26 26 74 79 70 65 6f 66 20 63 21 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: ._validateParameter=function(c,a,h){var b,g=a.type,l=!!a.integer,k=!!a.domElement,m=!!a.mayBeNull;b=Function._validateParameterType(c,g,l,k,m,h);if(b){b.popStackFrame();return b}var e=a.elementType,f=!!a.elementMayBeNull;if(g===Array&&typeof c!=="undefine
2024-11-25 18:29:47 UTC	6157	IN	Data Raw: 62 2e 72 65 73 6f 6c 76 65 49 6e 68 65 72 69 74 61 6e 63 65 28 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 29 7b 76 61 72 20 63 3d 62 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 3b 69 66 28 21 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 29 74 68 69 73 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 3d 63 7d 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 5f 62 61 73 65 50 72 6f 74 6f 74 79 70 65 50 65 6e 64 69 6e 67 7d 7d 3b 54 79 70 65 2e 67 65 74 52 6f 6f 74 4e 61 6d 65 73 70 61 63 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 63 6c 6f 6e 65 28 53 79 73 2e 5f 5f 72 6f 6f 74 4e 61 6d 65 73 70 61 63 65 73 29 7d 3b 54 79 70 65 2e 69 73 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 Data Ascii: b.resolveInheritance();for(var a in b.prototype){var c=b.prototype[a];if(!this.prototype[a])this.prototype[a]=c}delete this.__basePrototypePending}};Type.getRootNamespaces=function(){return Array.clone(Sys.__rootNamespaces)};Type.isClass=function(a){if(ty
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 45 76 65 6e 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 Data Ascii: EventArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.opera)
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 75 6c 6c 2c 2d 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 65 72 Data Ascii: ull,-1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Obser
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 28 21 Data Ascii: String()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if(!
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 74 69 Data Ascii: his._upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:functi
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 3d 3d 2d 31 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 Data Ascii: ==-1)if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serializat
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 66 28 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e Data Ascii: f(typeof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomElemen
2024-11-25 18:29:48 UTC	8192	IN	Data Raw: 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b 51 55 Data Ascii: ion(a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BLOCKQU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49715	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:47 UTC	824	OUT	GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:47 UTC	775	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 25 Nov 2025 18:29:47 GMT Last-Modified: Mon, 25 Nov 2024 18:29:47 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,45,2924714,0,1051136,11 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3991F8FBDE1342068FFC7CC9B56C7AE4 Ref B: EWR311000108011 Ref C: 2024-11-25T18:29:47Z Date: Mon, 25 Nov 2024 18:29:46 GMT Connection: close
2024-11-25 18:29:47 UTC	3395	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 73 65 3b 69 66 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 3b 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 73 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 73 63 72 69 70 74 4c 6f 61 64 65 64 44 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 7d 2c 6c 6f 61 64 53 63 72 69 70 74 73 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 62 2c 63 2c 61 29 7b 76 61 72 20 65 3d 7b 61 6c 6c 53 63 72 69 70 74 73 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 3a 62 2c 73 63 72 69 70 74 4c 6f 61 64 46 61 69 6c 65 64 43 61 6c 6c 62 61 63 6b 3a 63 2c 73 63 72 69 70 74 4c 6f 61 64 54 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 3a 61 2c 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 74 68 69 73 Data Ascii: se;if(this._events)delete this._events;this._sessions=null;this._currentSession=null;this._scriptLoadedDelegate=null},loadScripts:function(d,b,c,a){var e={allScriptsLoadedCallback:b,scriptLoadFailedCallback:c,scriptLoadTimeoutCallback:a,scriptsToLoad:this
2024-11-25 18:29:47 UTC	4144	IN	Data Raw: 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 53 65 72 76 65 72 45 72 72 6f 72 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 7c 7c 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 52 65 73 2e 50 52 4d 5f 53 65 72 76 65 72 45 72 72 6f 72 2c 61 29 29 2c 62 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 63 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 53 65 72 76 65 72 45 72 72 6f 72 45 78 63 65 70 74 69 6f 6e 22 2c 68 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 61 7d 29 3b 62 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 63 72 65 61 74 65 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 Data Ascii: ys.WebForms.PageRequestManagerServerErrorException: "+(d\|\|String.format(Sys.WebForms.Res.PRM_ServerError,a)),b=Error.create(c,{name:"Sys.WebForms.PageRequestManagerServerErrorException",httpStatusCode:a});b.popStackFrame();return b},_createPageRequestMana
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 69 65 6e 74 56 61 6c 69 64 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 Data Ascii: ientValidate(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof document.active
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 69 Data Ascii: (this._additionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexOf("?");i
2024-11-25 18:29:47 UTC	8192	IN	Data Raw: 69 70 74 44 69 73 70 6f 73 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d 2e 61 63 Data Ascii: iptDisposes[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this._form.ac
2024-11-25 18:29:47 UTC	19	IN	Data Raw: 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: more than once."};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49723	13.107.136.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:47 UTC	492	OUT	GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:48 UTC	770	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Tue, 25 Nov 2025 18:29:48 GMT Last-Modified: Sun, 06 Oct 2024 03:25:39 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4204800,9947,303,1987256,4204800,4204800,11 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B44956FC926A4B34A471A8F9D7CF510F Ref B: EWR311000102027 Ref C: 2024-11-25T18:29:48Z Date: Mon, 25 Nov 2024 18:29:48 GMT Connection: close
2024-11-25 18:29:48 UTC	327	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-11-25 18:29:48 UTC	8192	IN	Data Raw: 69 73 2e 74 72 61 63 6b 46 6f 63 75 73 20 3d 20 74 72 61 63 6b 46 6f 63 75 73 3b 0d 0a 20 20 20 20 74 68 69 73 2e 63 6c 69 65 6e 74 53 75 62 6d 69 74 20 3d 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 44 6f 50 6f 73 74 42 61 63 6b 57 69 74 68 4f 70 74 69 6f 6e 73 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 76 61 6c 69 64 61 74 69 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 50 61 67 65 5f 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 29 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: is.trackFocus = trackFocus; this.clientSubmit = clientSubmit;}function WebForm_DoPostBackWithOptions(options) { var validationResult = true; if (options.validation) { if (typeof(Page_ClientValidate) == 'function') {
2024-11-25 18:29:48 UTC	7217	IN	Data Raw: 4c 42 41 43 4b 49 4e 44 45 58 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 49 6e 64 65 78 46 69 65 6c 64 45 6c 65 6d 65 6e 74 2e 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 49 6e 64 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 52 65 71 75 65 73 74 46 72 61 6d 65 2e 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 61 6c 6c 62 61 63 6b 49 6e 64 65 78 46 69 65 6c 64 45 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 6d 6c 52 65 71 75 65 73 74 46 72 61 6d 65 2e 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e 73 75 62 6d 69 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e Data Ascii: LBACKINDEX"; callbackIndexFieldElement.value = callbackIndex; xmlRequestFrame.document.forms[0].appendChild(callbackIndexFieldElement); xmlRequestFrame.document.forms[0].submit(); } }, 10);}function
2024-11-25 18:29:48 UTC	7327	IN	Data Raw: 20 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f Data Ascii: else { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49724	2.21.147.10	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-25 18:29:48 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=54201 Date: Mon, 25 Nov 2024 18:29:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-25 18:29:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49721	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:49 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 18:29:49 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f1481939-e5a7-4d4d-85c4-ad9780649859 MS-RequestId: 2f1ac449-6111-46af-b0e4-2fcea0a35b5e MS-CV: N/bycg6meUKPqxyJ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 18:29:48 GMT Connection: close Content-Length: 24490
2024-11-25 18:29:49 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-25 18:29:49 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49726	13.107.136.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:49 UTC	549	OUT	GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:49 UTC	772	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 25 Nov 2025 18:29:49 GMT Last-Modified: Mon, 25 Nov 2024 18:29:49 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,22,694950,0,525568,11 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E625446A563740C3A721888338A6C5F2 Ref B: EWR311000101027 Ref C: 2024-11-25T18:29:49Z Date: Mon, 25 Nov 2024 18:29:49 GMT Connection: close
2024-11-25 18:29:49 UTC	3398	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-11-25 18:29:49 UTC	8192	IN	Data Raw: 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 64 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 29 0d 0a 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 76 61 6c 75 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 20 26 26 20 28 63 Data Ascii: t.getElementById(id); if (typeof(control.value) == "string") { return control.value; } return ValidatorGetValueRecursive(control);}function ValidatorGetValueRecursive(control){ if (typeof(control.value) == "string" && (c
2024-11-25 18:29:49 UTC	4144	IN	Data Raw: 20 20 20 69 66 20 28 6f 70 2e 6d 61 74 63 68 28 65 78 70 29 20 3d 3d 20 6e 75 6c 6c 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 6e 75 6d 20 3d 20 70 61 72 73 65 49 6e 74 28 6f 70 2c 20 31 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 69 73 4e 61 4e 28 6e 75 6d 29 20 3f 20 6e 75 6c 6c 20 3a 20 6e 75 6d 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 28 64 61 74 61 54 79 70 65 20 3d 3d 20 22 44 6f 75 62 6c 65 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 65 78 70 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 28 5b 2d 5c 5c 2b 5d 29 3f 28 5c 5c 64 2a 29 5c 5c 22 20 2b 20 76 61 6c 2e 64 65 63 69 6d 61 6c 63 68 61 72 20 2b 20 22 3f 28 5c 5c 64 2a 29 Data Ascii: if (op.match(exp) == null) return null; num = parseInt(op, 10); return (isNaN(num) ? null : num); } else if(dataType == "Double") { exp = new RegExp("^\\s([-\\+])?(\\d)\\" + val.decimalchar + "?(\\d*)
2024-11-25 18:29:50 UTC	8192	IN	Data Raw: 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a Data Ascii: e(val.controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\|
2024-11-25 18:29:50 UTC	3025	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 7d Data Ascii: var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return length; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49727	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:49 UTC	688	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:50 UTC	728	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Tue, 12 Nov 2024 04:11:46 GMT Accept-Ranges: bytes ETag: "11a66bfdb834db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,11699,0,40576,11 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 826AC5368B5340908A2BF107A603AC66 Ref B: EWR311000101037 Ref C: 2024-11-25T18:29:49Z Date: Mon, 25 Nov 2024 18:29:49 GMT Connection: close
2024-11-25 18:29:50 UTC	1680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"
2024-11-25 18:29:50 UTC	1651	IN	Data Raw: 05 b6 af bd ba c2 73 e8 b4 db 27 c3 22 ae 57 2f 33 b1 4a 57 6f 5e f2 e4 ae ce e4 ef f9 cf 63 6d 14 9b 36 e4 10 7e 8a ae 32 51 80 75 81 ee 90 7b 23 57 da 9a 36 c3 5c fa 45 a6 73 2a 6a cd f8 90 a3 eb 2a 5b 7c 49 53 21 bc 62 42 fa 81 33 98 dd 66 5c 38 8f af c9 8a 95 bc 29 fe d9 b2 60 f2 89 ef 13 df 06 3c 73 47 57 2b 87 f8 03 a7 7c 69 96 c9 a8 ef 1b 44 3c cf 9c d4 d8 0d fd ba c8 79 40 d7 9a 6a 3b fb e7 cf 3f b4 e4 fd 5d f6 b7 9b f3 95 70 f6 af ec 1f 6c 4c ff d0 46 9c ad bf 66 7f 6e c3 af 56 11 48 a6 19 71 31 53 92 7f c0 2d dd e2 a2 13 0b 88 e8 ca 7a 49 33 5d 28 d6 94 61 e6 d6 b6 b0 eb b9 bb f2 df 4d 7a fe 46 9e bc 10 1b e2 67 17 58 6d e5 bb b2 ea f1 3c 39 ba 92 3b 23 3f 25 a9 6c e3 d0 1d 40 c6 db 4c 6c fb 11 98 e6 d4 f7 af d2 57 84 64 fc 8f 58 15 0f bc b2 4a Data Ascii: s'"W/3JWo^cm6~2Qu{#W6\Esj[\|IS!bB3f\8)`<sGW+\|iD<y@j;?]plLFfnVHq1S-zI3](aMzFgXm<9;#?%l@LlWdXJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49728	13.107.136.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:49 UTC	578	OUT	GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:50 UTC	771	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 25 Nov 2025 18:29:49 GMT Last-Modified: Mon, 25 Nov 2024 18:29:49 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,526677,0,396251,11 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D470D1C4F1D64692BE6239EA1FAD9E9E Ref B: EWR311000101051 Ref C: 2024-11-25T18:29:49Z Date: Mon, 25 Nov 2024 18:29:49 GMT Connection: close
2024-11-25 18:29:50 UTC	3035	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-11-25 18:29:50 UTC	8192	IN	Data Raw: 73 2e 5f 70 61 6e 65 6c 73 55 70 64 61 74 69 6e 67 7d 7d 3b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 4c 6f 61 64 69 6e 67 45 76 65 6e 74 41 72 67 73 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 4c 6f 61 64 69 6e 67 45 76 65 6e 74 41 72 67 73 22 2c 53 79 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 53 79 73 2e 5f 53 63 72 69 70 74 4c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 73 3d 5b 5d 3b 74 68 69 73 2e 5f 73 63 72 69 70 74 4c 6f 61 64 65 64 44 65 6c 65 67 61 74 65 3d 46 75 6e 63 74 69 6f 6e 2e 63 72 65 61 74 65 44 65 6c 65 67 61 74 65 28 74 68 69 73 2c 74 68 69 73 2e 5f 73 63 Data Ascii: s._panelsUpdating}};Sys.WebForms.PageLoadingEventArgs.registerClass("Sys.WebForms.PageLoadingEventArgs",Sys.EventArgs);Sys._ScriptLoader=function(){this._scriptsToLoad=null;this._sessions=[];this._scriptLoadedDelegate=Function.createDelegate(this,this._sc
2024-11-25 18:29:50 UTC	4508	IN	Data Raw: 69 6c 64 4e 6f 64 65 73 5b 30 5d 3b 61 2e 5f 69 73 43 6f 6e 74 61 69 6e 65 64 3d 74 72 75 65 3b 61 2e 69 64 3d 61 2e 6e 61 6d 65 3d 63 3b 61 2e 76 61 6c 75 65 3d 64 7d 2c 5f 63 72 65 61 74 65 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 54 69 6d 65 6f 75 74 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 52 65 73 2e 50 52 4d 5f 54 69 6d 65 6f 75 74 45 72 72 6f 72 2c 61 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 54 69 Data Ascii: ildNodes[0];a._isContained=true;a.id=a.name=c;a.value=d},_createPageRequestManagerTimeoutError:function(){var b="Sys.WebForms.PageRequestManagerTimeoutException: "+Sys.WebForms.Res.PRM_TimeoutError,a=Error.create(b,{name:"Sys.WebForms.PageRequestManagerTi
2024-11-25 18:29:50 UTC	8192	IN	Data Raw: 56 61 6c 69 64 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d Data Ascii: Validate(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof document.activeElem
2024-11-25 18:29:50 UTC	8192	IN	Data Raw: 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 69 66 28 6d 21 Data Ascii: s._additionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexOf("?");if(m!
2024-11-25 18:29:50 UTC	8192	IN	Data Raw: 69 73 70 6f 73 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d 2e 61 63 74 69 6f 6e Data Ascii: isposes[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this._form.action
2024-11-25 18:29:50 UTC	15	IN	Data Raw: 65 20 74 68 61 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: e than once."};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49734	13.107.136.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:51 UTC	382	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:52 UTC	732	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Sun, 17 Nov 2024 04:24:44 GMT Accept-Ranges: bytes ETag: "751f1a0a838db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,12,247036,0,1051136,11 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2E5DAE5BB9E543EEAFDC68DF76315A21 Ref B: EWR311000107033 Ref C: 2024-11-25T18:29:51Z Date: Mon, 25 Nov 2024 18:29:51 GMT Connection: close
2024-11-25 18:29:52 UTC	3331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49733	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:51 UTC	688	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:52 UTC	739	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Tue, 12 Nov 2024 04:11:24 GMT Accept-Ranges: bytes ETag: "d363dbefb834db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,194,88,1109062,0,1051136,11 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 57D9665CE52B4DA7B3993436D761DBC4 Ref B: EWR311000108049 Ref C: 2024-11-25T18:29:52Z Date: Mon, 25 Nov 2024 18:29:51 GMT Connection: close
2024-11-25 18:29:52 UTC	3431	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-11-25 18:29:52 UTC	4455	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49736	13.107.136.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:29:53 UTC	382	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:29:54 UTC	737	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Tue, 12 Nov 2024 04:11:24 GMT Accept-Ranges: bytes ETag: "d363dbefb834db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,2102272,13,64,2206588,0,998531,10 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CB58B7C2D5E743FBB42B6942B1585020 Ref B: EWR311000104029 Ref C: 2024-11-25T18:29:54Z Date: Mon, 25 Nov 2024 18:29:54 GMT Connection: close
2024-11-25 18:29:54 UTC	2637	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-11-25 18:29:54 UTC	5249	IN	Data Raw: ff a1 9b 1a ff a1 9b 1a ef a1 9b 1a 30 00 00 00 00 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff bc b9 71 ff e1 e0 c0 ff f8 f7 ef ff f8 f7 ef ff e1 e0 c0 ff ad aa 52 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 41 3e 02 ff 65 61 03 ff 82 7e 0c ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ef a1 9b 1a 30 00 00 00 00 00 00 00 00 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 41 3e 02 ff 65 61 03 ff 70 6c 03 ff 79 75 07 ff 92 8c 13 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ef a1 9b Data Ascii: 0qRA>ea~0A>eaplyu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49740	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:04 UTC	1012	OUT	POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive Content-Length: 1295 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://calepa.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:04 UTC	1295	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 50 61 73 73 77 6f 72 64 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 5a 78 75 72 62 74 59 63 48 62 67 5a 58 64 47 62 5a 69 4c 34 71 25 32 46 70 59 39 66 4a 4a 4a 53 4b 78 61 66 78 6d 46 44 6a 74 38 62 64 6a 42 44 25 32 46 47 61 6a 79 7a 49 76 78 72 37 50 41 71 4b 46 33 4f 31 25 32 46 66 62 41 61 76 74 62 6c 25 32 42 61 43 74 62 6f 66 61 25 32 42 6b 79 32 51 52 38 43 74 77 65 67 44 6a 35 54 54 75 25 32 42 4c 6a 4c 63 6d 7a 65 43 76 5a 46 35 4b 71 43 52 4f 4a 52 44 54 25 32 46 67 47 42 58 42 50 65 57 6a 74 31 4b 49 64 4c 4a 42 37 58 49 70 38 42 6c Data Ascii: __EVENTTARGET=btnSubmitPassword&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=ZxurbtYcHbgZXdGbZiL4q%2FpY9fJJJSKxafxmFDjt8bdjBD%2FGajyzIvxr7PAqKF3O1%2FfbAavtbl%2BaCtbofa%2Bky2QR8CtwegDj5TTu%2BLjLcmzeCvZF5KqCROJRDT%2FgGBXBPeWjt1KIdLJB7XIp8Bl
2024-11-25 18:30:05 UTC	1672	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67126 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,2102272,0,77,3330174,0,2102272,11 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 356c67a1-a087-6000-e2e8-825b8ba2bca8 request-id: 356c67a1-a087-6000-e2e8-825b8ba2bca8 MS-CV: oWdsNYegAGDi6IJbi6K8qA.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 244 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 6545CE12B26043AA85AA038F2BAD2477 Ref B: EWR311000105019 Ref C: 2024-11-25T18:30:05Z Date: Mon, 25 Nov 2024 18:30:04 GMT Connection: close
2024-11-25 18:30:05 UTC	779	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-25 18:30:05 UTC	8192	IN	Data Raw: 70 72 69 6e 74 2c 20 70 72 6f 6a 65 63 74 69 6f 6e 22 3e 0d 0a 09 09 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d Data Ascii: print, projection">html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em
2024-11-25 18:30:05 UTC	5863	IN	Data Raw: 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 61 36 61 36 61 36 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 27 62 61 63 6b 67 72 6f 75 6e 64 2c 20 62 6f 72 64 65 72 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 27 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 2e 32 73 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 63 68 65 63 6b 62 6f 78 20 2e 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 62 6f 78 20 2e 6d 73 2d 49 63 6f 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 63 68 65 63 6b 62 6f 78 2e 63 68 65 63 6b 65 64 20 2e 63 68 65 63 6b 62 6f 78 2d 63 Data Ascii: solid;border-color:#a6a6a6;margin-right:8px;transition-property:'background, border, border-color';transition-duration:.2s;transition-timing-function:.2s;overflow:hidden}.checkbox .checkbox-checkbox .ms-Icon{visibility:hidden}.checkbox.checked .checkbox-c
2024-11-25 18:30:05 UTC	8192	IN	Data Raw: 30 30 37 34 61 65 37 35 32 34 33 31 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 35 Data Ascii: 0074ae752431">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha25
2024-11-25 18:30:05 UTC	8192	IN	Data Raw: 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 Data Ascii: s.constructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}functi
2024-11-25 18:30:05 UTC	8192	IN	Data Raw: 74 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 Data Ascii: typeof setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","sp
2024-11-25 18:30:05 UTC	8192	IN	Data Raw: 69 6e 69 6e 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 65 Data Ascii: ining=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(e
2024-11-25 18:30:05 UTC	8192	IN	Data Raw: 6d 73 2e 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 Data Ascii: ms.shift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlFa
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 46 55 65 57 79 36 51 67 44 56 63 69 4f 68 4c 38 38 49 4d 6e 67 63 4a 4d 53 2f 62 75 39 53 73 37 75 54 54 66 67 55 69 56 6d 50 70 4d 42 47 55 36 52 6c 34 2f 4c 63 32 4f 4e 5a 56 67 4b 78 74 51 47 54 65 63 67 52 73 64 4e 41 45 79 61 77 57 44 4b 6c 48 55 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 Data Ascii: FUeWy6QgDVciOhL88IMngcJMS/bu9Ss7uTTfgUiVmPpMBGU6Rl4/Lc2ONZVgKxtQGTecgRsdNAEyawWDKlHU=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49739	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:06 UTC	859	OUT	GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:06 UTC	773	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 25 Nov 2025 18:30:06 GMT Last-Modified: Mon, 25 Nov 2024 18:30:06 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,3360145,0,525568,11 X-AspNet-Version: 4.0.30319 SPRequestDuration: 6 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A704F0012B2944F0965181927EE9BADF Ref B: EWR311000106023 Ref C: 2024-11-25T18:30:06Z Date: Mon, 25 Nov 2024 18:30:05 GMT Connection: close
2024-11-25 18:30:06 UTC	3397	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 20 64 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 70 61 72 61 6d 4e 61 6d 65 3a 61 7d 29 3b 64 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 64 7d 3b 45 72 72 6f 72 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 64 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 3f 64 3a 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 29 3b 69 66 28 63 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 70 61 72 61 6d 4e 61 6d 65 2c Data Ascii: d=Error.create(b,{name:"Sys.ArgumentNullException",paramName:a});d.popStackFrame();return d};Error.argumentOutOfRange=function(c,a,d){var b="Sys.ArgumentOutOfRangeException: "+(d?d:Sys.Res.argumentOutOfRange);if(c)b+="\n"+String.format(Sys.Res.paramName,
2024-11-25 18:30:06 UTC	4144	IN	Data Raw: 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 26 26 61 2e 69 6d 70 6c 65 6d 65 6e 74 73 49 6e 74 65 72 66 61 63 65 28 63 29 7d 3b 53 79 73 2e 5f 67 65 74 42 61 73 65 4d 65 74 68 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 63 29 7b 76 61 72 20 62 3d 64 2e 67 65 74 42 61 73 65 54 79 70 65 28 29 3b 69 66 28 62 29 7b 76 61 72 20 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 53 79 73 2e 5f 69 73 44 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 22 6e 75 6d 62 65 72 22 Data Ascii: a.implementsInterface&&a.implementsInterface(c)};Sys._getBaseMethod=function(d,e,c){var b=d.getBaseType();if(b){var a=b.prototype[c];return a instanceof Function?a:null}return null};Sys._isDomElement=function(a){var c=false;if(typeof a.nodeType!=="number"
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 2e 45 76 65 6e 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 Data Ascii: .EventArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.opera
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 6e 75 6c 6c 2c 2d 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 65 Data Ascii: null,-1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Obse
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 28 Data Ascii: oString()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if(
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 74 Data Ascii: this._upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:funct
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 21 3d 3d 2d 31 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 Data Ascii: !==-1)if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serializa
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 Data Ascii: if(typeof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomEleme
2024-11-25 18:30:06 UTC	8192	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b 51 Data Ascii: tion(a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BLOCKQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49742	13.107.136.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:08 UTC	578	OUT	GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:09 UTC	768	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Tue, 25 Nov 2025 15:47:19 GMT Last-Modified: Mon, 25 Nov 2024 15:47:19 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,262,0,26712,65 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 13585937A9454E039256AFFDC084201A Ref B: EWR311000104051 Ref C: 2024-11-25T18:30:08Z Date: Mon, 25 Nov 2024 18:30:08 GMT Connection: close
2024-11-25 18:30:09 UTC	3936	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 65 6c 73 65 20 69 66 28 63 26 26 62 29 61 2b 3d 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 54 79 70 65 57 69 74 68 54 79 70 65 73 2c 63 2e 67 65 74 4e 61 6d 65 28 29 2c 62 2e 67 65 74 4e 61 6d 65 28 29 29 3b 65 6c 73 65 20 61 2b 3d 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 54 79 70 65 3b 69 66 28 64 29 61 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 70 61 72 61 6d 4e 61 6d 65 2c 64 29 3b 76 61 72 20 66 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 61 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 54 79 70 65 45 78 63 65 70 74 69 6f 6e 22 2c 70 61 72 61 6d 4e 61 6d 65 3a 64 2c 61 63 74 75 61 6c 54 79 70 65 3a 63 2c 65 78 70 65 63 74 65 64 54 79 70 65 3a Data Ascii: else if(c&&b)a+=String.format(Sys.Res.argumentTypeWithTypes,c.getName(),b.getName());else a+=Sys.Res.argumentType;if(d)a+="\n"+String.format(Sys.Res.paramName,d);var f=Error.create(a,{name:"Sys.ArgumentTypeException",paramName:d,actualType:c,expectedType:
2024-11-25 18:30:09 UTC	3610	IN	Data Raw: 72 61 79 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6c 65 6e 67 74 68 3d 30 7d 3b 41 72 72 61 79 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 72 65 74 75 72 6e 20 5b 61 5b 30 5d 5d 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 41 72 72 61 79 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 29 7d 3b 41 72 72 61 79 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 53 79 73 2e 5f 69 6e 64 65 78 4f 66 28 61 2c 62 29 3e 3d 30 7d 3b 41 72 72 61 79 2e 64 65 71 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 68 69 66 74 28 29 7d 3b 41 72 72 61 79 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 65 2c 64 29 7b 66 6f Data Ascii: ray.clear=function(a){a.length=0};Array.clone=function(a){if(a.length===1)return [a[0]];else return Array.apply(null,a)};Array.contains=function(a,b){return Sys._indexOf(a,b)>=0};Array.dequeue=function(a){return a.shift()};Array.forEach=function(b,e,d){fo
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 77 69 6e 64 Data Ascii: tArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.opera)wind
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 2d 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e Data Ascii: -1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Observer.
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 28 21 6b 26 26 6e Data Ascii: ng()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if(!k&&n
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: _upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:function(a
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e Data Ascii: )if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serialization.
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 Data Ascii: peof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomElement._g
2024-11-25 18:30:09 UTC	8192	IN	Data Raw: 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b 51 55 4f 54 45 22 Data Ascii: a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BLOCKQUOTE"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49743	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:16 UTC	1047	OUT	POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive Content-Length: 1299 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://calepa.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:16 UTC	1299	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 50 61 73 73 77 6f 72 64 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 56 6d 49 4d 78 77 6d 6f 55 4a 76 32 33 63 4d 61 71 62 52 55 41 25 32 42 25 32 42 77 59 48 57 6a 6f 54 39 5a 6c 4a 43 39 50 78 39 66 79 37 6a 78 58 4d 59 36 36 33 4c 25 32 42 74 6e 58 6a 4a 74 32 78 70 46 58 68 32 4c 44 74 69 6d 6a 4f 65 77 75 72 6d 76 71 6d 58 37 61 34 61 6b 41 38 6a 6e 74 38 5a 30 30 45 45 6a 6b 47 44 43 50 4c 45 45 38 73 47 75 31 78 30 4a 54 57 72 56 64 79 58 6c 32 32 30 4a 58 76 4b 68 69 51 6a 62 37 4c 48 79 65 7a 33 43 49 31 79 67 51 42 71 44 58 6b 68 63 52 Data Ascii: __EVENTTARGET=btnSubmitPassword&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=VmIMxwmoUJv23cMaqbRUA%2B%2BwYHWjoT9ZlJC9Px9fy7jxXMY663L%2BtnXjJt2xpFXh2LDtimjOewurmvqmX7a4akA8jnt8Z00EEjkGDCPLEE8sGu1x0JTWrVdyXl220JXvKhiQjb7LHyez3CI1ygQBqDXkhcR
2024-11-25 18:30:16 UTC	1669	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67126 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,26,721609,0,525568,11 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 386c67a1-f040-7000-2524-f19be35cf921 request-id: 386c67a1-f040-7000-2524-f19be35cf921 MS-CV: oWdsOEDwAHAlJPGb41z5IQ.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 269 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D11137CC0D5646B09EF9568D1ECDC956 Ref B: EWR311000101027 Ref C: 2024-11-25T18:30:16Z Date: Mon, 25 Nov 2024 18:30:16 GMT Connection: close
2024-11-25 18:30:16 UTC	2501	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-25 18:30:16 UTC	8192	IN	Data Raw: 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 73 65 61 72 63 68 Data Ascii: pe=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search
2024-11-25 18:30:16 UTC	4144	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 63 75 73 2d 61 72 65 61 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 32 2e 35 70 78 3b 72 69 67 68 74 3a 31 32 2e 35 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 29 3b 6d 61 78 2d 77 69 64 74 68 3a 33 36 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 3a 31 33 70 78 20 30 20 31 36 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 20 2e 68 65 61 64 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f Data Ascii: container .focus-area{position:absolute;top:12.5px;right:12.5px}.sharing-form{border-radius:6px;box-shadow:0 0 10px 0 rgba(0,0,0,.17);max-width:360px;display:flex;flex-direction:column;margin:13px 0 16px}.sharing-form .header{border-top-left-radius:6px;bo
2024-11-25 18:30:17 UTC	8192	IN	Data Raw: 61 39 66 31 65 39 62 64 66 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 35 36 2d 50 Data Ascii: a9f1e9bdf">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha256-P
2024-11-25 18:30:17 UTC	8192	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: onstructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}function
2024-11-25 18:30:17 UTC	8192	IN	Data Raw: 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 65 63 69 Data Ascii: eof setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","speci
2024-11-25 18:30:17 UTC	8192	IN	Data Raw: 6e 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 65 29 3b 4f Data Ascii: ng=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(e);O
2024-11-25 18:30:17 UTC	8192	IN	Data Raw: 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 Data Ascii: shift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlFaile
2024-11-25 18:30:17 UTC	8192	IN	Data Raw: 41 36 75 78 55 6a 75 42 68 30 73 48 61 65 50 4a 54 43 51 32 43 75 72 68 6d 75 55 6f 6c 50 47 78 61 43 30 43 71 53 58 39 75 71 30 2f 31 4f 52 6d 39 36 67 6d 6d 4a 42 4d 4a 2f 69 79 4b 32 4e 5a 54 78 52 55 6b 59 57 52 33 38 4f 42 72 2f 71 37 49 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 63 72 69 Data Ascii: A6uxUjuBh0sHaePJTCQ2CurhmuUolPGxaC0CqSX9uq0/1ORm96gmmJBMJ/iyK2NZTxRUkYWR38OBr/q7I=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</scri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49744	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:23 UTC	1047	OUT	POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive Content-Length: 1320 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://calepa.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:23 UTC	1320	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 50 61 73 73 77 6f 72 64 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 6b 34 35 50 59 32 4e 4e 57 41 45 63 53 52 71 75 44 6b 75 45 32 5a 32 46 49 4a 6e 39 4e 31 25 32 42 35 37 6b 67 6c 4e 67 4b 72 35 61 42 62 63 72 63 51 4f 7a 46 25 32 42 75 25 32 42 62 39 54 6f 77 66 41 51 79 6e 65 53 4b 73 44 49 57 53 4c 31 68 6e 74 54 43 61 77 74 6a 38 35 54 30 45 53 51 41 48 6e 58 73 73 6a 63 4e 67 39 4f 4b 64 25 32 42 75 73 34 38 59 46 39 51 39 45 6f 31 7a 61 69 6d 78 30 37 43 4c 59 64 46 79 74 38 64 61 37 50 6f 62 6f 37 73 6e 52 52 53 5a 66 47 56 46 57 47 4c Data Ascii: __EVENTTARGET=btnSubmitPassword&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=k45PY2NNWAEcSRquDkuE2Z2FIJn9N1%2B57kglNgKr5aBbcrcQOzF%2Bu%2Bb9TowfAQyneSKsDIWSL1hntTCawtj85T0ESQAHnXssjcNg9OKd%2Bus48YF9Q9Eo1zaimx07CLYdFyt8da7Pobo7snRRSZfGVFWGL
2024-11-25 18:30:23 UTC	1669	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67126 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,12,427894,0,431948,11 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3a6c67a1-a000-7000-2524-f22b15c3d90c request-id: 3a6c67a1-a000-7000-2524-f22b15c3d90c MS-CV: oWdsOgCgAHAlJPIrFcPZDA.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 245 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 263767BBA6BF49578EC1C2333612D6EC Ref B: EWR311000105033 Ref C: 2024-11-25T18:30:23Z Date: Mon, 25 Nov 2024 18:30:22 GMT Connection: close
2024-11-25 18:30:23 UTC	81	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/
2024-11-25 18:30:23 UTC	8192	IN	Data Raw: 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-
2024-11-25 18:30:23 UTC	6564	IN	Data Raw: 69 73 6d 69 73 73 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 65 78 74 65 72 6e 61 6c 2d 73 68 61 72 69 6e 67 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 65 78 74 65 72 6e 61 6c 2d 73 68 61 72 69 6e 67 2d 63 6f 6e 74 65 6e 74 20 61 2e 64 69 73 61 62 6c 65 64 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 2e 73 70 69 6e 6e 65 72 2c 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 Data Ascii: ismiss:focus{outline:0}.external-sharing-content{height:100%}.external-sharing-content a.disabled{pointer-events:none;cursor:default}*,:after,:before{box-sizing:inherit}.spinner,html{box-sizing:border-box}.main-content{flex-direction:column;display:flex;a
2024-11-25 18:30:24 UTC	8192	IN	Data Raw: 39 66 66 38 62 63 32 38 34 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 35 36 2d 50 Data Ascii: 9ff8bc284">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha256-P
2024-11-25 18:30:24 UTC	8192	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: onstructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}function
2024-11-25 18:30:24 UTC	8192	IN	Data Raw: 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 65 63 69 Data Ascii: eof setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","speci
2024-11-25 18:30:24 UTC	8192	IN	Data Raw: 6e 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 65 29 3b 4f Data Ascii: ng=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(e);O
2024-11-25 18:30:24 UTC	8192	IN	Data Raw: 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 Data Ascii: shift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlFaile
2024-11-25 18:30:24 UTC	8192	IN	Data Raw: 6e 6b 62 64 72 71 35 4c 79 53 56 30 54 30 68 6e 70 41 6d 77 67 42 50 62 55 41 4a 70 62 55 2f 6f 38 35 4b 4b 6d 65 31 57 4a 44 57 56 42 52 33 54 65 36 78 78 39 4c 61 69 36 79 6b 50 74 6f 30 33 54 4c 31 68 50 32 76 63 64 68 6a 52 4c 54 67 66 30 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 63 72 69 Data Ascii: nkbdrq5LySV0T0hnpAmwgBPbUAJpbU/o85KKme1WJDWVBR3Te6xx9Lai6ykPto03TL1hP2vcdhjRLTgf0=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</scri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49750	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:29 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-25 18:30:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: fbc9783f-5b62-49df-a3bc-b8f72ee7f6aa MS-RequestId: 4a558f3c-1ae6-443a-b441-e18c871d8679 MS-CV: P4hbOsKQekyA/HjD.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 25 Nov 2024 18:30:28 GMT Connection: close Content-Length: 30005
2024-11-25 18:30:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-25 18:30:29 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49748	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:32 UTC	1047	OUT	POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive Content-Length: 1302 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://calepa.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:32 UTC	1302	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 50 61 73 73 77 6f 72 64 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 72 78 75 6c 32 57 76 57 37 49 5a 67 55 48 38 55 6d 4c 77 5a 41 61 4e 30 25 32 46 57 52 51 78 77 58 75 4d 43 54 35 75 58 43 61 6e 56 32 6f 52 55 51 39 71 7a 43 4d 25 32 46 74 39 4e 75 65 79 37 58 57 45 62 31 4a 59 66 49 51 39 61 55 43 4c 53 79 57 49 45 45 56 57 41 7a 75 73 74 4a 64 65 77 6b 34 6b 76 71 4c 37 25 32 42 6c 42 73 57 52 6b 65 52 63 71 33 77 39 59 75 55 4f 35 55 62 73 43 6e 30 77 56 74 67 45 43 7a 46 33 6a 47 6d 66 77 42 6b 67 37 65 25 32 46 4e 72 66 71 48 4d 32 34 76 Data Ascii: __EVENTTARGET=btnSubmitPassword&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=rxul2WvW7IZgUH8UmLwZAaN0%2FWRQxwXuMCT5uXCanV2oRUQ9qzCM%2Ft9Nuey7XWEb1JYfIQ9aUCLSyWIEEVWAzustJdewk4kvqL7%2BlBsWRkeRcq3w9YuUO5UbsCn0wVtgECzF3jGmfwBkg7e%2FNrfqHM24v
2024-11-25 18:30:32 UTC	1671	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67126 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,2936984,0,525568,10 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3c6c67a1-102a-6000-e2e8-8dee1edb2b43 request-id: 3c6c67a1-102a-6000-e2e8-8dee1edb2b43 MS-CV: oWdsPCoQAGDi6I3uHtsrQw.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 136 SPIisLatency: 122 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DC3774ACD58B465A8CE822FEAAC21974 Ref B: EWR311000102033 Ref C: 2024-11-25T18:30:32Z Date: Mon, 25 Nov 2024 18:30:31 GMT Connection: close
2024-11-25 18:30:32 UTC	2986	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-25 18:30:32 UTC	8192	IN	Data Raw: 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0d 0a 09 09 2e 6d 73 2d 46 61 62 72 69 63 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 20 57 65 62 20 28 57 65 73 74 20 45 75 72 6f 70 65 61 6e 29 27 2c 27 53 65 67 6f 65 20 55 49 27 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 52 6f 62 6f 74 6f 2c 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 6d 73 2d 46 61 62 Data Ascii: n]{display:none}.ms-Fabric{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;color:#333;font-family:'Segoe UI Web (West European)','Segoe UI',-apple-system,BlinkMacSystemFont,Roboto,'Helvetica Neue',sans-serif;font-size:14px}.ms-Fab
2024-11-25 18:30:32 UTC	3657	IN	Data Raw: 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 70 61 64 64 69 6e 67 3a 32 38 70 78 20 33 32 70 78 20 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2d 74 65 78 74 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 34 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 66 6f 72 6d 2d 73 75 62 6d 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 Data Ascii: er-bottom-right-radius:6px;border-bottom-left-radius:6px;padding:28px 32px 32px;background:#fff;position:relative}.form-content .placeholder-text,.form-content input{height:44px;width:100%}.form-content .form-submit{background-color:#0078d7;color:#fff;bor
2024-11-25 18:30:32 UTC	8192	IN	Data Raw: 37 66 36 34 66 30 66 64 30 63 37 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 35 36 Data Ascii: 7f64f0fd0c7">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha256
2024-11-25 18:30:32 UTC	8192	IN	Data Raw: 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 6f Data Ascii: .constructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}functio
2024-11-25 18:30:32 UTC	8192	IN	Data Raw: 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 65 Data Ascii: ypeof setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","spe
2024-11-25 18:30:32 UTC	8192	IN	Data Raw: 6e 69 6e 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 65 29 Data Ascii: ning=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(e)
2024-11-25 18:30:33 UTC	8192	IN	Data Raw: 73 2e 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 Data Ascii: s.shift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlFai
2024-11-25 18:30:33 UTC	8192	IN	Data Raw: 70 52 48 6e 6b 43 58 55 79 6c 64 53 46 41 4f 56 4e 34 6c 6f 53 74 62 6e 47 6a 38 4e 6e 41 35 77 4c 48 4e 36 52 39 66 34 53 69 4b 64 51 49 35 73 74 75 71 52 31 33 2b 58 38 74 57 77 76 52 64 39 2f 58 37 70 74 6a 6f 2f 4e 43 55 56 54 77 46 30 68 4a 6f 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 63 Data Ascii: pRHnkCXUyldSFAOVN4loStbnGj8NnA5wLHN6R9f4SiKdQI5stuqR13+X8tWwvRd9/X7ptjo/NCUVTwF0hJo=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49751	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:40 UTC	1047	OUT	POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive Content-Length: 1309 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://calepa.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:40 UTC	1309	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 50 61 73 73 77 6f 72 64 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 6c 75 43 74 33 58 4d 73 4c 4c 42 45 65 66 63 6f 6f 66 66 52 70 39 76 63 63 42 42 7a 56 52 42 68 55 55 50 62 73 78 64 46 38 37 71 51 76 64 61 53 55 41 77 32 6f 79 65 77 61 64 48 4e 62 37 38 62 68 6a 69 6c 5a 41 77 4d 34 41 46 4f 7a 4a 49 6f 32 68 64 57 56 65 64 56 6d 51 48 25 32 46 4b 78 66 6a 61 72 6e 31 74 53 36 4a 78 4b 37 46 31 78 49 70 4a 38 58 4c 35 53 44 6b 61 71 52 63 36 42 67 6a 50 65 77 4b 64 67 4d 50 47 51 74 6e 73 6f 37 31 47 70 66 38 49 5a 4d 6c 4f 49 64 33 77 57 64 Data Ascii: __EVENTTARGET=btnSubmitPassword&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=luCt3XMsLLBEefcooffRp9vccBBzVRBhUUPbsxdF87qQvdaSUAw2oyewadHNb78bhjilZAwM4AFOzJIo2hdWVedVmQH%2FKxfjarn1tS6JxK7F1xIpJ8XL5SDkaqRc6BgjPewKdgMPGQtnso71Gpf8IZMlOId3wWd
2024-11-25 18:30:41 UTC	1668	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67126 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,711814,0,525568,11 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 3e6c67a1-c048-7000-2524-f0fb3b0349cd request-id: 3e6c67a1-c048-7000-2524-f0fb3b0349cd MS-CV: oWdsPkjAAHAlJPD7OwNJzQ.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 243 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4EF7510A86A94CAB8AEF6056C11B2F6B Ref B: EWR311000108051 Ref C: 2024-11-25T18:30:41Z Date: Mon, 25 Nov 2024 18:30:40 GMT Connection: close
2024-11-25 18:30:41 UTC	2502	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-25 18:30:41 UTC	8192	IN	Data Raw: 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 73 65 61 72 63 68 5d Data Ascii: e=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]
2024-11-25 18:30:41 UTC	4144	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 63 75 73 2d 61 72 65 61 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 32 2e 35 70 78 3b 72 69 67 68 74 3a 31 32 2e 35 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 29 3b 6d 61 78 2d 77 69 64 74 68 3a 33 36 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 3a 31 33 70 78 20 30 20 31 36 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 20 2e 68 65 61 64 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 72 Data Ascii: ontainer .focus-area{position:absolute;top:12.5px;right:12.5px}.sharing-form{border-radius:6px;box-shadow:0 0 10px 0 rgba(0,0,0,.17);max-width:360px;display:flex;flex-direction:column;margin:13px 0 16px}.sharing-form .header{border-top-left-radius:6px;bor
2024-11-25 18:30:41 UTC	8192	IN	Data Raw: 34 62 63 65 64 31 33 37 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 35 36 2d 50 4e Data Ascii: 4bced137">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha256-PN
2024-11-25 18:30:41 UTC	8192	IN	Data Raw: 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 75 Data Ascii: nstructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}function u
2024-11-25 18:30:41 UTC	8192	IN	Data Raw: 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 65 63 69 66 Data Ascii: of setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","specif
2024-11-25 18:30:41 UTC	8192	IN	Data Raw: 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 65 29 3b 4f 28 Data Ascii: g=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(e);O(
2024-11-25 18:30:41 UTC	8192	IN	Data Raw: 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 64 Data Ascii: hift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlFailed
2024-11-25 18:30:41 UTC	8192	IN	Data Raw: 2b 7a 70 66 74 4d 38 75 67 2f 77 56 53 2b 4b 41 38 6f 30 65 4d 35 2f 4e 56 71 31 63 4a 2f 51 6e 47 51 71 78 61 70 63 7a 50 54 46 5a 34 4f 6f 30 6d 77 34 53 46 34 52 6f 54 35 43 46 36 6f 52 2f 59 76 4e 34 39 5a 75 31 59 33 79 53 66 69 54 6b 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 63 72 69 70 Data Ascii: +zpftM8ug/wVS+KA8o0eM5/NVq1cJ/QnGQqxapczPTFZ4Oo0mw4SF4RoT5CF6oR/YvN49Zu1Y3ySfiTk=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</scrip

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.8	49758	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:47 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:48 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:47 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 23 Nov 2024 12:15:37 GMT ETag: "0x8DD0BB889D4282C" x-ms-request-id: c3062018-b01e-003e-79df-3d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183047Z-178bfbc474bv7whqhC1NYC1fg400000007s000000000qpys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:48 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-25 18:30:48 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49754	13.107.138.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:49 UTC	1047	OUT	POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive Content-Length: 1316 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://calepa.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:49 UTC	1316	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 50 61 73 73 77 6f 72 64 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 67 42 45 67 69 71 70 36 39 4f 4a 62 4f 37 74 63 67 52 56 66 38 61 46 63 72 6d 4b 5a 47 73 38 39 4f 46 54 56 36 52 68 75 45 4b 33 74 56 51 43 37 25 32 42 73 69 31 6e 51 30 31 33 6a 78 25 32 42 39 54 61 42 4a 53 48 35 75 68 6e 6a 4a 43 65 50 6a 4d 51 6e 53 47 64 57 52 6d 30 6f 58 63 59 6f 79 64 46 59 68 6c 50 35 6d 78 64 37 69 54 6f 50 69 55 42 59 78 32 51 49 63 59 4b 74 64 61 6f 35 41 31 50 4f 4f 6d 43 38 6f 4f 4c 79 6e 61 56 6f 37 72 62 32 68 43 4f 31 68 37 59 67 56 31 38 76 64 Data Ascii: __EVENTTARGET=btnSubmitPassword&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=gBEgiqp69OJbO7tcgRVf8aFcrmKZGs89OFTV6RhuEK3tVQC7%2Bsi1nQ013jx%2B9TaBJSH5uhnjJCePjMQnSGdWRm0oXcYoydFYhlP5mxd7iToPiUBYx2QIcYKtdao5A1POOmC8oOLynaVo7rb2hCO1h7YgV18vd
2024-11-25 18:30:50 UTC	1669	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67126 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,3828626,0,525568,10 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 406c67a1-806e-6000-e2e8-83ea5aa9d27d request-id: 406c67a1-806e-6000-e2e8-83ea5aa9d27d MS-CV: oWdsQG6AAGDi6IPqWqnSfQ.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 252 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A5A93FB0E04A4B049C1D6F53E615F481 Ref B: EWR311000104053 Ref C: 2024-11-25T18:30:49Z Date: Mon, 25 Nov 2024 18:30:49 GMT Connection: close
2024-11-25 18:30:50 UTC	2501	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-25 18:30:50 UTC	8192	IN	Data Raw: 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 73 65 61 72 63 68 Data Ascii: pe=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search
2024-11-25 18:30:50 UTC	4144	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 63 75 73 2d 61 72 65 61 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 32 2e 35 70 78 3b 72 69 67 68 74 3a 31 32 2e 35 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 29 3b 6d 61 78 2d 77 69 64 74 68 3a 33 36 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 3a 31 33 70 78 20 30 20 31 36 70 78 7d 2e 73 68 61 72 69 6e 67 2d 66 6f 72 6d 20 2e 68 65 61 64 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f Data Ascii: container .focus-area{position:absolute;top:12.5px;right:12.5px}.sharing-form{border-radius:6px;box-shadow:0 0 10px 0 rgba(0,0,0,.17);max-width:360px;display:flex;flex-direction:column;margin:13px 0 16px}.sharing-form .header{border-top-left-radius:6px;bo
2024-11-25 18:30:50 UTC	8192	IN	Data Raw: 33 64 33 64 30 32 32 36 37 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 35 36 2d 50 Data Ascii: 3d3d02267">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha256-P
2024-11-25 18:30:50 UTC	8192	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: onstructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}function
2024-11-25 18:30:50 UTC	8192	IN	Data Raw: 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 70 65 63 69 Data Ascii: eof setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","speci
2024-11-25 18:30:50 UTC	8192	IN	Data Raw: 6e 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 65 29 3b 4f Data Ascii: ng=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(e);O
2024-11-25 18:30:50 UTC	8192	IN	Data Raw: 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 61 69 6c 65 Data Ascii: shift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlFaile
2024-11-25 18:30:50 UTC	8192	IN	Data Raw: 46 65 77 6b 59 61 4a 69 59 31 38 67 7a 70 51 67 4c 73 36 50 48 79 2f 66 7a 41 74 71 42 6e 4f 79 6a 54 50 45 68 31 37 6b 71 33 30 36 41 74 79 4b 41 36 79 55 73 46 36 49 46 4c 6f 4f 42 46 5a 4d 35 64 77 75 47 62 73 5a 57 42 79 43 37 68 74 56 67 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f 73 63 72 69 Data Ascii: FewkYaJiY18gzpQgLs6PHy/fzAtqBnOyjTPEh17kq306AtyKA6yUsF6IFLoOBFZM5dwuGbsZWByC7htVg=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</scri

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.8	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:50 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:50 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183050Z-174c587ffdfx984chC1TEB676g000000069000000000fsar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:51 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.8	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:50 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:50 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8db92378-201e-003f-2cbf-3e6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183050Z-178bfbc474btrnf9hC1NYCb80g00000007wg00000000t621 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:51 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.8	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:50 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:50 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 44ae66ae-301e-001f-7627-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183050Z-178bfbc474bvjk8shC1NYC83ns00000007ng00000000gwd6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:51 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.8	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:50 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:51 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:50 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 2eed8dc4-701e-0098-0dc6-3e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183050Z-15b8b599d889fz52hC1TEB59as000000068000000000g3wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:51 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.8	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:50 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:51 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:51 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c9502ca5-e01e-0033-0fb4-3e4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183051Z-178bfbc474bwh9gmhC1NYCy3rs00000007yg00000000886r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:51 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.8	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:52 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 65361fd5-201e-0033-283f-3cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183053Z-15b8b599d882hxlwhC1TEBfa5w00000006ag00000000096u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.8	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:52 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:53 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d8f13441-a01e-0021-5e2d-3c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183053Z-178bfbc474bxkclvhC1NYC69g400000007sg00000000dm0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:53 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.8	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:52 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: da423632-601e-0002-52c6-3ea786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183053Z-178bfbc474b9fdhphC1NYCac0n00000007ug000000005vbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.8	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:52 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: c312cdef-801e-0083-52a3-3ef0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183053Z-174c587ffdfb5q56hC1TEB04kg000000067000000000f9ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49771	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:52 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:53 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 4860472f-101e-0028-01d0-3e8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183053Z-178bfbc474bw8bwphC1NYC38b400000007rg0000000068gq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:53 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49773	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:55 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c38a0343-101e-008e-38bf-3ecf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183055Z-178bfbc474bwlrhlhC1NYCy3kg00000007x0000000005hrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.8	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:55 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: aff2abcc-f01e-0003-4547-3c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183055Z-178bfbc474b9xljthC1NYCtw9400000007qg00000000ka62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.8	49774	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:55 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:55 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 5fd12e2e-e01e-0051-1fc8-3e84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183055Z-178bfbc474bmqmgjhC1NYCy16c00000007u000000000py8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:55 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.8	49775	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:55 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:55 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:55 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 08b7745d-b01e-00ab-54e9-3edafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183055Z-15b8b599d889fz52hC1TEB59as000000069g00000000b29h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-25 18:30:55 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.8	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:55 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:55 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 30a29eaf-701e-001e-220f-3ef5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183055Z-178bfbc474bnwsh4hC1NYC2ubs00000007y000000000au7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:55 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.8	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:57 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 44207c53-001e-0079-37ad-3b12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183057Z-15b8b599d88f9wfchC1TEBm2kc00000006h0000000002dxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.8	49781	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:57 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:57 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 3257ccc0-201e-005d-19b5-3eafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183057Z-178bfbc474bp8mkvhC1NYCzqnn00000007q000000000c59p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:57 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.8	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:57 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 21648528-e01e-003c-794e-3cc70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183057Z-178bfbc474bh5zbqhC1NYCkdug00000007ng00000000xnut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.8	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:57 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:57 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 63e0f5a8-701e-0032-207a-3ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183057Z-178bfbc474bp8mkvhC1NYCzqnn00000007s00000000056qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:57 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	49765	13.107.136.10	443	6072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:57 UTC	1047	OUT	POST /sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg HTTP/1.1 Host: calepa.sharepoint.com Connection: keep-alive Content-Length: 1325 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://calepa.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-25 18:30:57 UTC	1325	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 50 61 73 73 77 6f 72 64 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 32 33 2e 31 32 30 31 36 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 61 32 6e 38 6a 41 30 76 6c 32 75 6c 75 56 6a 75 74 47 66 51 4b 47 32 4a 71 49 36 42 6c 6c 6a 48 62 62 70 71 4c 77 25 32 42 50 71 48 78 6b 76 35 43 68 64 4b 44 52 5a 53 5a 77 78 63 43 25 32 46 66 57 32 32 4c 46 25 32 46 68 35 53 4c 75 37 4c 68 70 66 62 6c 44 49 38 65 25 32 46 6f 44 4e 4d 38 74 42 59 33 6c 42 48 64 64 66 78 4d 56 68 65 4e 6f 48 71 31 31 7a 45 33 70 73 25 32 42 42 58 67 7a 56 4a 65 59 34 38 4c 6a 48 64 64 53 62 43 4d 4a 58 49 65 55 53 62 64 56 45 6e 58 4f 61 45 64 Data Ascii: __EVENTTARGET=btnSubmitPassword&__EVENTARGUMENT=&SideBySideToken=16.0.25423.12016&__VIEWSTATE=a2n8jA0vl2uluVjutGfQKG2JqI6BlljHbbpqLw%2BPqHxkv5ChdKDRZSZwxcC%2FfW22LF%2Fh5SLu7LhpfblDI8e%2FoDNM8tBY3lBHddfxMVheNoHq11zE3ps%2BBXgzVJeY48LjHddSbCMJXIeUSbdVEnXOaEd
2024-11-25 18:30:58 UTC	1673	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 67126 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4204800,3,100,3835553,0,2471496,11 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 426c67a1-b057-6000-e2e8-88271f08832d request-id: 426c67a1-b057-6000-e2e8-88271f08832d MS-CV: oWdsQlewAGDi6IgnHwiDLQ.0 Alt-Svc: h3=":443";ma=86400 Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbigov.us .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 253 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25423 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EFCC923EDE1D4296B042FE108835DDB1 Ref B: EWR311000102037 Ref C: 2024-11-25T18:30:57Z Date: Mon, 25 Nov 2024 18:30:57 GMT Connection: close
2024-11-25 18:30:58 UTC	1143	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-11-25 18:30:58 UTC	8192	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 3a 6f 62 6a 65 63 74 73 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 63 6f 64 65 2c 6b 62 64 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 Data Ascii: {background-color:transparent;-webkit-text-decoration-skip:objects}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monos
2024-11-25 18:30:58 UTC	5498	IN	Data Raw: 6e 3a 68 6f 76 65 72 2b 2e 63 61 6c 6c 6f 75 74 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 68 65 63 6b 62 6f 78 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 63 68 65 63 6b 62 6f 78 2e 64 69 73 61 62 6c 65 64 20 2e 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 61 65 61 65 61 3b 62 6f 72 Data Ascii: n:hover+.callout{visibility:visible}.checkbox input[type=checkbox]{display:none}.checkbox .checkbox-label{display:inline-flex;align-items:center;cursor:pointer;position:relative;user-select:none}.checkbox.disabled .checkbox-checkbox{background:#eaeaea;bor
2024-11-25 18:30:58 UTC	8192	IN	Data Raw: 2d 36 33 31 66 66 61 62 34 35 38 61 37 22 3e 0d 0a 09 09 76 61 72 20 67 5f 72 65 73 70 6f 6e 73 65 45 6e 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 45 55 50 4c 2e 57 33 43 52 65 73 70 6f 6e 73 65 45 6e 64 27 29 3b 77 69 6e 64 6f 77 5b 27 46 61 62 72 69 63 43 6f 6e 66 69 67 27 5d 20 3d 20 7b 20 66 6f 6e 74 42 61 73 65 55 72 6c 3a 20 27 27 7d 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 5f 63 75 6c 74 75 72 65 27 5d 20 3d 20 27 65 6e 2d 75 73 27 3b 77 69 6e 64 6f 77 5b 27 5f 5f 6f 64 73 70 53 72 69 48 61 73 68 65 73 27 5d 20 3d 20 7b 22 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 3a 22 73 68 61 32 Data Ascii: -631ffab458a7">var g_responseEnd = new Date().getTime();window.performance && performance.mark('EUPL.W3CResponseEnd');window['FabricConfig'] = { fontBaseUrl: ''};window['__odsp_culture'] = 'en-us';window['__odspSriHashes'] = {"spoguestaccess.js":"sha2
2024-11-25 18:30:58 UTC	8192	IN	Data Raw: 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 75 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 5b 43 5d 26 26 62 28 6e 29 3b 76 61 72 20 69 3d 72 2e 5f 73 74 61 74 65 3b 69 66 28 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 Data Ascii: is.constructor(u);void 0===n[C]&&b(n);var i=r._state;if(i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}funct
2024-11-25 18:30:58 UTC	8192	IN	Data Raw: 3d 74 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 34 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 29 7d 3b 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 7c 7c 72 65 71 3b 72 65 71 2e 76 65 72 73 69 6f 6e 3d 76 65 72 73 69 6f 6e 3b 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 3d 2f 5e 5c 2f 7c 3a 7c 5c 3f 7c 5c 2e 6a 73 24 2f 3b 72 65 71 2e 69 73 42 72 6f 77 73 65 72 3d 69 73 42 72 6f 77 73 65 72 3b 73 3d 72 65 71 2e 73 3d 7b 63 6f 6e 74 65 78 74 73 3a 63 6f 6e 74 65 78 74 73 2c 6e 65 77 43 6f 6e 74 65 78 74 3a 6e 65 77 43 6f 6e 74 65 78 74 7d 3b 72 65 71 28 7b 7d 29 3b 65 61 63 68 28 5b 22 74 6f 55 72 6c 22 2c 22 75 6e 64 65 66 22 2c 22 64 65 66 69 6e 65 64 22 2c 22 73 Data Ascii: =typeof setTimeout?function(e){setTimeout(e,4)}:function(e){e()};require=require\|\|req;req.version=version;req.jsExtRegExp=/^\/\|:\|\?\|\.js$/;req.isBrowser=isBrowser;s=req.s={contexts:contexts,newContext:newContext};req({});each(["toUrl","undef","defined","s
2024-11-25 18:30:58 UTC	8192	IN	Data Raw: 66 69 6e 69 6e 67 3d 21 31 3b 69 66 28 74 68 69 73 2e 64 65 66 69 6e 65 64 26 26 21 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 29 7b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 74 65 64 3d 21 30 3b 74 68 69 73 2e 65 6d 69 74 28 22 64 65 66 69 6e 65 64 22 2c 74 68 69 73 2e 65 78 70 6f 72 74 73 29 3b 74 68 69 73 2e 64 65 66 69 6e 65 45 6d 69 74 43 6f 6d 70 6c 65 74 65 3d 21 30 7d 7d 7d 65 6c 73 65 20 68 61 73 50 72 6f 70 28 64 2e 64 65 66 51 75 65 75 65 4d 61 70 2c 72 29 7c 7c 74 68 69 73 2e 66 65 74 63 68 28 29 7d 7d 2c 63 61 6c 6c 50 6c 75 67 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 2e 6d 61 70 2c 63 3d 75 2e 69 64 2c 65 3d 45 28 75 2e 70 72 65 66 69 78 29 3b 74 68 69 73 2e 64 65 70 4d 61 70 73 2e 70 75 73 68 28 Data Ascii: fining=!1;if(this.defined&&!this.defineEmitted){this.defineEmitted=!0;this.emit("defined",this.exports);this.defineEmitComplete=!0}}}else hasProp(d.defQueueMap,r)\|\|this.fetch()}},callPlugin:function(){var u=this.map,c=u.id,e=E(u.prefix);this.depMaps.push(
2024-11-25 18:30:58 UTC	8192	IN	Data Raw: 65 6d 73 2e 73 68 69 66 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 75 6e 64 65 66 28 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 28 6e 75 6c 6c 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6b 69 70 4d 61 70 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 5b 69 64 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 2c 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 2e 62 61 73 65 55 72 6c 46 Data Ascii: ems.shift(); require.undef(id); require(null, { skipMap: true })([id]); } } require.config({ baseUrl: backupBaseUrl, }); failOverState.baseUrlF
2024-11-25 18:30:58 UTC	8192	IN	Data Raw: 74 33 7a 79 33 44 5a 7a 35 4b 4d 37 41 4d 4a 6a 37 61 46 38 6c 65 49 72 4a 55 6a 65 73 61 6c 69 39 4e 4f 6e 7a 39 59 59 56 57 57 6d 67 57 35 2b 67 50 56 31 4f 70 48 2b 68 44 4f 39 6d 5a 38 50 7a 47 72 39 78 70 45 5a 62 52 34 4c 56 62 6c 52 6f 50 65 6f 77 3d 22 20 2f 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 2f 2f 3c 21 5b 43 44 41 54 41 5b 0d 0a 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 53 63 72 69 70 74 4d 61 6e 61 67 65 72 27 2c 20 27 69 6e 70 75 74 46 6f 72 6d 27 2c 20 5b 5d 2c 20 5b 5d 2c 20 5b 5d 2c 20 39 30 2c 20 27 27 29 3b 0d 0a 09 2f 2f 5d 5d 3e 0d 0a 3c 2f Data Ascii: t3zy3DZz5KM7AMJj7aF8leIrJUjesali9NOnz9YYVWWmgW5+gPV1OpH+hDO9mZ8PzGr9xpEZbR4LVblRoPeow=" /></div><script type="text/javascript">//<![CDATA[Sys.WebForms.PageRequestManager._initialize('ScriptManager', 'inputForm', [], [], [], 90, '');//...</

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.8	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:57 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:57 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 44e9982d-301e-001f-6639-3caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183057Z-15b8b599d88s6mj9hC1TEBur30000000062g00000000hzzn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:57 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.8	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:59 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c77577e7-501e-0078-0da6-3e06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183059Z-178bfbc474bp8mkvhC1NYCzqnn00000007hg00000000vv4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.8	49787	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:59 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:30:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2b92647c-c01e-00a2-646f-3b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183059Z-174c587ffdftv9hphC1TEBm29w000000064g00000000u3nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:30:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.8	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:59 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:59 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: cbc435e9-501e-0016-3f64-3d181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183059Z-15b8b599d88vp97chC1TEB5pzw00000006a0000000009s2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.8	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:59 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:30:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: be1025a3-a01e-0002-661b-3d5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183059Z-178bfbc474b9fdhphC1NYCac0n00000007p000000000s953 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.8	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:30:59 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:00 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c569ec8c-a01e-003d-0e22-3d98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183100Z-178bfbc474bbcwv4hC1NYCypys00000007rg000000008vvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:00 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.8	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 876f21bf-101e-007a-0bbf-3e047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183102Z-178bfbc474bq2pr7hC1NYCkfgg0000000820000000004bpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.8	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: ab0897c6-601e-0084-085b-3f6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183102Z-178bfbc474bvjk8shC1NYC83ns00000007sg0000000034e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.8	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:02 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183102Z-174c587ffdfp4vpjhC1TEBybqw00000006a000000000dfpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:02 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.8	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: a839412a-a01e-0032-5a3c-3d1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183102Z-174c587ffdf7t49mhC1TEB4qbg000000066g00000000gc0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.8	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:02 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 81bf26fc-f01e-0099-6bb6-3e9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183102Z-178bfbc474btrnf9hC1NYCb80g00000007vg00000000xx2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.8	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:04 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:04 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 2160d4c7-701e-0021-5913-3d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183104Z-178bfbc474bh5zbqhC1NYCkdug00000007v00000000048kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:04 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.8	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5532245b-c01e-00ad-0e6f-3da2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183104Z-174c587ffdfcj798hC1TEB9bq400000006e000000000hw5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.8	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 95b9e869-801e-008c-3081-3b7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183104Z-174c587ffdf8fcgwhC1TEBnn7000000006g000000000a0tu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.8	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:04 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3ac3f4da-f01e-001f-4c47-3c5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183104Z-178bfbc474bwlrhlhC1NYCy3kg00000007u000000000gss5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.8	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-25 18:31:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-25 18:31:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 25 Nov 2024 18:31:05 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241125T183105Z-174c587ffdftv9hphC1TEBm29w000000064000000000we7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-25 18:31:05 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Target ID:	0
Start time:	13:29:34
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:29:38
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1932,i,6279707170055968014,1770641071044784253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:29:40
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: Number of links: 0
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: Number of links: 0

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: Title: Sharing Link Validation does not match URL

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitPassword", "", true, "", "", false, true))

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: <input type="password" .../> found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: <input type="password" .../> found

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="author".. found

Source: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found
Source: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 2.21.147.10
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Source: global traffic	HTTP traffic detected: GET /:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=ZAHpYD7HrvcFTKGABsbqF--DQjFLYE7Mo3rK8OBBI2u6w7s7humLZ09tdCjGHyxR_bgWawWV-LqkCrntcFA2HYzPdD4xKgHlgA-5jyj187Q1&t=638637567397700854 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Fxj7tDzfFBtuQUh-y9Bvxljhd9cicCneshZQyDEy9BVcB54sxO3QIoOi9Mbz-LAHjmDAqH3Z7QIf7hKWZVcS6TgI-DXJ_XD8G_FMNX5yT1P957XoptmpY76aRU-fcz6hFhXR1mH1-5W-Xwqw9vf7hqratjB-0P96f1WgBTtgS6c1&t=64bd211b HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=3Bn9wIJiWX4vpUj7ujgHOIhaKnfATsuGE9nGuh2AdMT4ndXMSZGP4_JyOW56tt9-0eGT8d9mgwWOpXjhRdxJgFHNvEjrN7Nkn-6A3w4OgScP5fPw2c5b9Jir8rTcj05Lq1sUCWKv2nK38JBJF8kBiWr9RfE8FWCYdOiszn8vIwTFbmtpbr3u_vg4Vy6IoBDT0&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://calepa.sharepoint.com/sites/UP/_layouts/15/guestaccess.aspx?e=sQKCC8&share=Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=wjbtE3J2qiHDuNe9i7RdUUtGbHaa61reE4mS-T6zcss00Yr114B6as2Gt9sNJ04q2lYPx-CenalEutYfZ-p1qTtapkC0MJAIH4skk28Kf0cYaIdse7KSdn34U4zP-l0DAhut5Cb5o1wTXhgoJdLYjDXNkcgi_0qL5X7FmQDWulwRIsHr-HmjKjFr-NDtFEf80&t=ffffffffb201fd3f HTTP/1.1Host: calepa.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kK3a4DNZlzcm8k+&MD=yhm7Bfyd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: calepa.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Windows Analysis Report
https://calepa.sharepoint.com/:f:/s/UP/Em-PmNAmQ2NDjzYP0qZ738cBxfs0zfvprsEcYfFDpNQkMg?e=sQKCC8